--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3e03a4f-8980-4471-bf54-671706fe7c6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3e03a4f-8980-4471-bf54-671706fe7c6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-d73038-sub"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3e03a4f-8980-4471-bf54-671706fe7c6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33c32681-aca7-4cbd-b1cd-82dc9b41ac30","keyName":"e2e-tenant-inference-d73038","selected_subscription":"test-model-d73038-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-d73038/test-model-d73038-sub@ai-tenant-e2e-inf-a-d73038/test-model-d73038","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-d73038","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-d73038-sub","namespace":"ai-tenant-e2e-inf-a-d73038","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3e03a4f-8980-4471-bf54-671706fe7c6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3e03a4f-8980-4471-bf54-671706fe7c6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60386","PortSpecifier":{"PortValue":60386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-d73038.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60386","PortSpecifier":{"PortValue":60386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035708,"nanos":373316901},"http":{"id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","method":"POST","headers":{":authority":"e2e-inf-a-d73038.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0714403d6639e255879fa9ba41eb658d7935d4bf759cdbc3e72576d872490290"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-d73038.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-d73038/test-model-d73038\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe6129a-1fb3-4957-b442-2ea8adeaf43c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44416","PortSpecifier":{"PortValue":44416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","method":"POST","path":"/ai-tenant-e2e-inf-b-8c4f9c/test-model-8c4f9c/v1/chat/completions","host":"e2e-inf-b-8c4f9c.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44416","PortSpecifier":{"PortValue":44416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035708,"nanos":411954598},"http":{"id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","method":"POST","headers":{":authority":"e2e-inf-b-8c4f9c.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-8c4f9c/test-model-8c4f9c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WykCG5Ob9oQtU0Hw_Jp3zLlBRgYWTr8thBworSDoahGpu9sWdxolRBSY71YA"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-8c4f9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WykCG5Ob9oQtU0Hw_Jp3zLlBRgYWTr8thBworSDoahGpu9sWdxolRBSY71YA\"}"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-8c4f9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-8c4f9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8d856ef8dfa18914b6bf7a2232fa84ff6c0eb1e3d30bb4d3eeef820a7c1a3042"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-8c4f9c.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-8c4f9c/test-model-8c4f9c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T23:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a9b4fe4-ab9c-4917-8b31-b63ee98229f8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T23:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2290616681b792ff5adc515333f4978dc30423fed077535e4cba1beb9d7a5e26"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d131546aba015bb85afd3036ce688e343ae5c8fabcabaf3f5ffd87c13725ae9"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8b0b33392d73bf02377235dc138c9942ddfe84664c1e97e28c1e6b361bf8a83"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9927912bfff4bee74f8e041c016180c55553274686082b65f3a11b5c4fc8fd77"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/139dc15ed7697f421da1b612d2f3e7583783d97285ee346dcdafb33b84e0e93e"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0714403d6639e255879fa9ba41eb658d7935d4bf759cdbc3e72576d872490290"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c883efcac23ab95fb122beccbacc8b6c772673a17fe9722f6b7703f4e48f5175"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdacc09b6506e9cf8e1235f1622e8a1969c8ee741074c0b852e8dbc96f384e75"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4ac9197e9c48a2359af87594a18433a6e27f401efc72cbcd31a60689cdde20b"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4f3f02281632e617a2abdf28a21b3fcf60cc7d7a0e6e44fad020f9bb007638"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4448a46ca619b31ffaf41dbaa472a62b52f6338b52e7d24ef3eff37c84bb371"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c34d5c64a7f0b4732a82ca91b2e7b91f4b8ab11289d8aac97dedc10e5153aa54"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b789f9b5c78d9dd822aa082525290c0731a910f70e5f1ce2f487e4ac400089cd"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc41eafbb137f6882d0b18b3f0e6392ddf79c9f433ec0b833d2389a03e4771fd"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d856ef8dfa18914b6bf7a2232fa84ff6c0eb1e3d30bb4d3eeef820a7c1a3042"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4d0caf52abb6d9d2b2f0ae8081c76aec15305aebb9968c561f830e2554141e"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e5839e625d271d58c58db7fc5b6ecbe8158975c0061447b6c4af446cec21b84"}
{"level":"info","ts":"2026-07-02T23:41:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9982246d85c0496a8fc968e7daa47590e23ab1c55af5206e8c5de254e4459331"}
{"level":"info","ts":"2026-07-02T23:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf76dc396a88b36693875387ff3aff3f6695613f49ad8977fcad6ceefb079082"}
{"level":"info","ts":"2026-07-02T23:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f8544ad574fe8c77d321e81f3e8de02c921ddf72dd336111f411df14ae7732"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"error","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:42:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"info","ts":"2026-07-02T23:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2efde54e5af776f38c19fdf63d0a6d71fa848033607245a386cc3f87442d6ebd"}
{"level":"info","ts":"2026-07-02T23:42:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299f443c6c195462eb97b57532bb001ed9f7f6891c4e8db5ee06deff0d2b87b"}
{"level":"info","ts":"2026-07-02T23:42:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e90460cc9c369957d8d27058863cebe7ed6772b585e5d056dccbab0faa2551"}
{"level":"info","ts":"2026-07-02T23:42:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb8ffec2b8627f8ba835c84a0c006c19a39e5f1d1d5069a1256a6901f06a192"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"}
{"level":"info","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"error","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:43:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4"}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"debug","ts":"2026-07-02T23:43:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a"}
{"level":"error","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"info","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035846,"nanos":672012433},"http":{"id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585e0bc-4bff-4ff3-a3a3-4c5075064bce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51938","PortSpecifier":{"PortValue":51938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46b589da-92b3-4985-99ed-ce1ce00b802f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51938","PortSpecifier":{"PortValue":51938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035846,"nanos":734891659},"http":{"id":"46b589da-92b3-4985-99ed-ce1ce00b802f","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46b589da-92b3-4985-99ed-ce1ce00b802f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40e92757-6826-4ee1-93b5-edc772860fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43594","PortSpecifier":{"PortValue":43594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40e92757-6826-4ee1-93b5-edc772860fef","method":"GET","path":"/maas-api/v1/api-keys/47dac23e-d336-412f-95b5-eaa3222e8f83","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40e92757-6826-4ee1-93b5-edc772860fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43594","PortSpecifier":{"PortValue":43594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035846,"nanos":793334142},"http":{"id":"40e92757-6826-4ee1-93b5-edc772860fef","method":"GET","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47dac23e-d336-412f-95b5-eaa3222e8f83",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40e92757-6826-4ee1-93b5-edc772860fef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40e92757-6826-4ee1-93b5-edc772860fef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47dac23e-d336-412f-95b5-eaa3222e8f83",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40e92757-6826-4ee1-93b5-edc772860fef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40e92757-6826-4ee1-93b5-edc772860fef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40e92757-6826-4ee1-93b5-edc772860fef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51944","PortSpecifier":{"PortValue":51944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","method":"GET","path":"/maas-api/v1/api-keys/f66798cf-bacf-4dc1-a5ef-20fb2c84347b","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51944","PortSpecifier":{"PortValue":51944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035846,"nanos":834316795},"http":{"id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","method":"GET","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f66798cf-bacf-4dc1-a5ef-20fb2c84347b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f66798cf-bacf-4dc1-a5ef-20fb2c84347b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80c41454-fefb-4b83-b13e-05e6f0bfa562","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741b0047-8c35-4947-9f91-b57517a070b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"741b0047-8c35-4947-9f91-b57517a070b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741b0047-8c35-4947-9f91-b57517a070b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33904","PortSpecifier":{"PortValue":33904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035861,"nanos":846814834},"http":{"id":"741b0047-8c35-4947-9f91-b57517a070b8","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"741b0047-8c35-4947-9f91-b57517a070b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"741b0047-8c35-4947-9f91-b57517a070b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741b0047-8c35-4947-9f91-b57517a070b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741b0047-8c35-4947-9f91-b57517a070b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741b0047-8c35-4947-9f91-b57517a070b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48200","PortSpecifier":{"PortValue":48200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b25603ac-96cd-465c-a4aa-81479b89e00d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48200","PortSpecifier":{"PortValue":48200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035861,"nanos":888145914},"http":{"id":"b25603ac-96cd-465c-a4aa-81479b89e00d","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b25603ac-96cd-465c-a4aa-81479b89e00d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"655b94a1-d86c-458f-98a1-96021c82ca44","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035861,"nanos":930449330},"http":{"id":"655b94a1-d86c-458f-98a1-96021c82ca44","method":"GET","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WC1qnlI5DN18UFQm_2wbsi8ujrrEn0folZFfbly8Z1apXBp3k6FkdSLlwdLQ"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WC1qnlI5DN18UFQm_2wbsi8ujrrEn0folZFfbly8Z1apXBp3k6FkdSLlwdLQ\"}"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f29aec4c-db6a-4e80-acc3-25c61f2abe4e","keyName":"e2e-auth-iso-a-d6bf0b","subscription":"e2e-auth-iso-157ef7","tenant":"e2e-shared-a-9d43a8","userId":"f29aec4c-db6a-4e80-acc3-25c61f2abe4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-157ef7"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"655b94a1-d86c-458f-98a1-96021c82ca44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33786","PortSpecifier":{"PortValue":33786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"decf798d-fe63-4325-a36a-11d7e299aa01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33786","PortSpecifier":{"PortValue":33786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035879,"nanos":50727458},"http":{"id":"decf798d-fe63-4325-a36a-11d7e299aa01","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"decf798d-fe63-4325-a36a-11d7e299aa01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34900","PortSpecifier":{"PortValue":34900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9df2472b-e9cc-43a6-8cff-fca677d33057","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34900","PortSpecifier":{"PortValue":34900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035879,"nanos":90644622},"http":{"id":"9df2472b-e9cc-43a6-8cff-fca677d33057","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df2472b-e9cc-43a6-8cff-fca677d33057","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34904","PortSpecifier":{"PortValue":34904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f10cf71-0237-406e-9d44-25b907d64b10","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34904","PortSpecifier":{"PortValue":34904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035879,"nanos":132618529},"http":{"id":"4f10cf71-0237-406e-9d44-25b907d64b10","method":"GET","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-T3Rn78f5ZPoe7ObF_8XFtjGzaMHwgMzwTXZ7gCmTIx8feBWkF5wIetU3Ndch"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-T3Rn78f5ZPoe7ObF_8XFtjGzaMHwgMzwTXZ7gCmTIx8feBWkF5wIetU3Ndch\"}"}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T23:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f10cf71-0237-406e-9d44-25b907d64b10","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49594","PortSpecifier":{"PortValue":49594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b06dc790-74d9-4173-a52e-d5b2ee450998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49594","PortSpecifier":{"PortValue":49594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035896,"nanos":254519492},"http":{"id":"b06dc790-74d9-4173-a52e-d5b2ee450998","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b06dc790-74d9-4173-a52e-d5b2ee450998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43728","PortSpecifier":{"PortValue":43728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43728","PortSpecifier":{"PortValue":43728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035896,"nanos":289367762},"http":{"id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb4e8d6-3edf-4973-a346-d76e968e8730","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49602","PortSpecifier":{"PortValue":49602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49602","PortSpecifier":{"PortValue":49602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035896,"nanos":325981999},"http":{"id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8253d5fa-c30b-4bfe-8a92-6bbabe89e85c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43744","PortSpecifier":{"PortValue":43744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43744","PortSpecifier":{"PortValue":43744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035896,"nanos":365330630},"http":{"id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcb5e1e-5acc-9350-a801-baf3e427632a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45116","PortSpecifier":{"PortValue":45116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"441dc12e-ad00-407b-a042-0bdb96a1a020","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45116","PortSpecifier":{"PortValue":45116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035913,"nanos":482307285},"http":{"id":"441dc12e-ad00-407b-a042-0bdb96a1a020","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"441dc12e-ad00-407b-a042-0bdb96a1a020","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40934","PortSpecifier":{"PortValue":40934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31d7fd5a-6736-4e4f-914b-3781493bb042","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40934","PortSpecifier":{"PortValue":40934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035913,"nanos":519440777},"http":{"id":"31d7fd5a-6736-4e4f-914b-3781493bb042","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d7fd5a-6736-4e4f-914b-3781493bb042","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","method":"GET","path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035913,"nanos":556460666},"http":{"id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","method":"GET","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c35c4fc1-19ae-4ac5-aee8-8864ef60fb71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45132","PortSpecifier":{"PortValue":45132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"477d7b41-3ed7-4472-b16a-430c6596efb3","method":"GET","path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45132","PortSpecifier":{"PortValue":45132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035913,"nanos":589713151},"http":{"id":"477d7b41-3ed7-4472-b16a-430c6596efb3","method":"GET","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e39ba388-7d1a-4558-a192-2683c9db85b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477d7b41-3ed7-4472-b16a-430c6596efb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59678","PortSpecifier":{"PortValue":59678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59678","PortSpecifier":{"PortValue":59678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035930,"nanos":656969258},"http":{"id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4902cee7-1b84-4214-9360-5a6ab4ac47e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48776","PortSpecifier":{"PortValue":48776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48776","PortSpecifier":{"PortValue":48776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035930,"nanos":694961932},"http":{"id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/auth-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2bc254-5c9c-45a5-a0af-76aa149e5f23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aef59d3-6638-4221-9155-7953106d07c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59692","PortSpecifier":{"PortValue":59692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aef59d3-6638-4221-9155-7953106d07c8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aef59d3-6638-4221-9155-7953106d07c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59692","PortSpecifier":{"PortValue":59692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783035930,"nanos":731975240},"http":{"id":"5aef59d3-6638-4221-9155-7953106d07c8","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VQaCu5VJg8PdIQ02_qWYJdfTGI28ImQ0ZHFWuTv0Q7Wk0yZGNkfnEJ31y9dz"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VQaCu5VJg8PdIQ02_qWYJdfTGI28ImQ0ZHFWuTv0Q7Wk0yZGNkfnEJ31y9dz\"}"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5322799-abd5-454b-a82a-1ee2d6ad70dc","keyName":"e2e-auth-iso-a-1ac8bc","subscription":"e2e-auth-iso-3fc770","tenant":"e2e-shared-a-9d43a8","userId":"c5322799-abd5-454b-a82a-1ee2d6ad70dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aef59d3-6638-4221-9155-7953106d07c8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/auth-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3fc770"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aef59d3-6638-4221-9155-7953106d07c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aef59d3-6638-4221-9155-7953106d07c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aef59d3-6638-4221-9155-7953106d07c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e34ef26fd10479ada83a0081ea1f9ec2ed0b70bbfa8d6ca2169c4456e3599de"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b3f49c558903fad851d57fe0f6d8e44bd6f0a35867bf5cbc6490af1c50b8a2"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05e491fbb86a764430f82f49f127e64818e858cb0f25632f77cef2d638b68a57"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/030773a086b6920ab49abc9f0f416fcf09e068902b485ef0d5e8143356d34cf4"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cb6a4f37d5b9dc53159d382d05df04de93a0393afba252f98e59ce214a94e2c"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6aff9645e504987bcb2946577250e991b5841f1df16ef3f24dc2ba67a309b835"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e0b326cd1fdfce40eb79c494d2983d424a3a71ee976d8bfa1be7a4e6321fe39"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/439daf7dcf4f5afe9d73ea7094e352b1ac411365c942b7691b900f63df518e0a"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28490d3e85c5b09136c94a4c7b1bd1a564dd4d4c3ef9a796dcff9642e80ac5f4"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53da6cbf65f4de8b73beae19e643b5855d30793a0ca659a1b93c60aed83cab23"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/653c545128b86793f7123c7b70e4b66e88015c9a79fef7c4796eb903fd851273"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff578fba4215d8d720184cd4e0e470b448fdc37daf222a2742779b35ba24a53"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e599fcd5cc7e7640d8179cb03491fea7bbae151c5df1c9be8d7f4844c7a5a53"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcc6bf662575f1f346c825d9bedaf67509efba4f7bb3f8cac0f597f87556d91a"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdeb023d25120f1ed6ce76730c3311cc6469159746dfbc36ab33770b7a880a69"}
{"level":"info","ts":"2026-07-02T23:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4fa2af376b5f126def93dae0992f35caa0518794a0b1c21488189c9249a4b6c"}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"}
{"level":"error","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158"}
{"level":"info","ts":"2026-07-02T23:46:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4"}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"}
{"level":"info","ts":"2026-07-02T23:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036009,"nanos":335345622},"http":{"id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/sub-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a61725f-2c4a-4432-b567-78a4b32b9c83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53690","PortSpecifier":{"PortValue":53690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69f1e80e-37e2-453a-9646-b3c6845b4546","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53690","PortSpecifier":{"PortValue":53690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036009,"nanos":376363152},"http":{"id":"69f1e80e-37e2-453a-9646-b3c6845b4546","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/sub-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f1e80e-37e2-453a-9646-b3c6845b4546","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036009,"nanos":417313202},"http":{"id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","method":"GET","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBtMmRWmDRx664PQ_OdplDqGsDcMvW29lhoi55xQVEfsEqGiImDlMaUyG55D"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBtMmRWmDRx664PQ_OdplDqGsDcMvW29lhoi55xQVEfsEqGiImDlMaUyG55D\"}"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f3043b7-3873-4360-a701-c750ba7ddcde","keyName":"e2e-sub-iso-f3d4d3","subscription":"e2e-a-only-e20f9c","tenant":"e2e-shared-a-9d43a8","userId":"5f3043b7-3873-4360-a701-c750ba7ddcde","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/sub-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e20f9c"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccba3a2a-5e8c-48aa-bc21-916b97da504f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53698","PortSpecifier":{"PortValue":53698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53698","PortSpecifier":{"PortValue":53698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036009,"nanos":461063802},"http":{"id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","method":"GET","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12U7hZ42ZJoLlTNPF_pS3xTAjRRU6HogHHZLGWwGiniLAOtNdOby8XxGULeVZ"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12U7hZ42ZJoLlTNPF_pS3xTAjRRU6HogHHZLGWwGiniLAOtNdOby8XxGULeVZ\"}"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b8063db-d685-4b54-ab7f-72ce310dad05","keyName":"e2e-sub-iso-4a5d43","subscription":"e2e-b-only-e20f9c","tenant":"e2e-shared-b-fcd282","userId":"7b8063db-d685-4b54-ab7f-72ce310dad05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/sub-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e20f9c"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08afc48-bd1e-4d4f-ad08-b3ced72a5bf1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c039406-4f39-4728-b21d-c29414b3c863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49554","PortSpecifier":{"PortValue":49554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c039406-4f39-4728-b21d-c29414b3c863","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c039406-4f39-4728-b21d-c29414b3c863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49554","PortSpecifier":{"PortValue":49554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036019,"nanos":462623619},"http":{"id":"0c039406-4f39-4728-b21d-c29414b3c863","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c039406-4f39-4728-b21d-c29414b3c863","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c039406-4f39-4728-b21d-c29414b3c863","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/sub-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c039406-4f39-4728-b21d-c29414b3c863","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c039406-4f39-4728-b21d-c29414b3c863","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c039406-4f39-4728-b21d-c29414b3c863","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57780","PortSpecifier":{"PortValue":57780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57780","PortSpecifier":{"PortValue":57780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036019,"nanos":500620629},"http":{"id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/sub-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f236f7c-03dd-42d6-98f9-e6ddce5fab12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036019,"nanos":533719881},"http":{"id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QbEs1Of37QF8p2tY_tf9ie4QRhQ8VeKzV0fgmewxCQzzVC67S0oWeFb3CCW1"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QbEs1Of37QF8p2tY_tf9ie4QRhQ8VeKzV0fgmewxCQzzVC67S0oWeFb3CCW1\"}"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82052433-8862-4690-bded-82299d5fd3c8","keyName":"e2e-sub-iso-dd1525","subscription":"e2e-shared-sub-7c3b97","tenant":"e2e-shared-a-9d43a8","userId":"82052433-8862-4690-bded-82299d5fd3c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/sub-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7c3b97"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c9b20e6-3e0b-47db-bf3f-feadd4dbcba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57784","PortSpecifier":{"PortValue":57784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57784","PortSpecifier":{"PortValue":57784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036019,"nanos":563333090},"http":{"id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SScIm64Hqw4jhwh6_66XpvEF0cWhvQQqrXVKsHdfwnhl3fLP9659JsatE2BO"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SScIm64Hqw4jhwh6_66XpvEF0cWhvQQqrXVKsHdfwnhl3fLP9659JsatE2BO\"}"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ccbe7b5e-ed21-4af2-b845-c7034abfe1a1","keyName":"e2e-sub-iso-1c8bad","subscription":"e2e-shared-sub-7c3b97","tenant":"e2e-shared-b-fcd282","userId":"ccbe7b5e-ed21-4af2-b845-c7034abfe1a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/sub-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7c3b97"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e2e485-8527-4ed1-b14f-d0dd5dac8025","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b0b7027fdd722d1b17e0eca510df14118805ba40213eaa131b92fbac0ab4e8"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe2ba83ac672fb75a882c68142b4506c9371cfe8668e19d58809e177c06c51a4"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f433b5244c03002efe1e515c1039ad9251c4593f2048d2aadf83a72122f89b9"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bd9d56c024014317960fe8d6272d74da629c3a79a8fd84a703d4650160dbfb1"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5479e6222896bcc005fb046d4c209315de51fb6e4afa9a14bd28b1802ad8804"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1510c9d05d636a740df108d2ec1d33f293afae131a6cbf2911007b0e49efdf6b"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec03e6097286733e28bbc601adf6bdc4e499a2ad2fc64e93082b7c5d6ae92aed"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9822ce5ea41cb5f948551b4dcdddbbb2c890f1c689c4bf4cdf883afc68adf78"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecccb242e866fd0ce84dec3fe31f448b44cfab0551a9b8588d79c00946f87642"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70138effa99095bf2273a98b14459853a2c10190467df3e4beddca9743c36c0f"}
{"level":"info","ts":"2026-07-02T23:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88cd61cb7aec4c2c9f4aaddc8bd082a49bb7bb42ac47cb2b59c4556689d99348"}
{"level":"info","ts":"2026-07-02T23:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7e1c630db0fcccfaa24a38935da21482840de3dafcaef35bc15c983f3f143d"}
{"level":"info","ts":"2026-07-02T23:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1affdc906cbe2e46fc9618cb1333970c91b147d5b1eb079f5e97935d236fe53e"}
{"level":"info","ts":"2026-07-02T23:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09802b190a67353e18a8c899073afb00f0aced527e5c9a2d60a2635b89e8158"}
{"level":"info","ts":"2026-07-02T23:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ca08707d66defb31acb0ae3741eca6dc24615e9d978e1ddecf7f5c22fac323e"}
{"level":"info","ts":"2026-07-02T23:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f01f08e813e9641a86677b16405d6fadded6b2b6a2fd8c9e232d8ced107388f"}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"info","ts":"2026-07-02T23:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"error","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"error","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56008","PortSpecifier":{"PortValue":56008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56008","PortSpecifier":{"PortValue":56008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":705339207},"http":{"id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38812","PortSpecifier":{"PortValue":38812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0626c6f7-a61a-4270-b3d9-e81935098799","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38812","PortSpecifier":{"PortValue":38812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":750518001},"http":{"id":"0626c6f7-a61a-4270-b3d9-e81935098799","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a7004a4-6ad2-4618-85e2-3d1038517220","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":819312022},"http":{"id":"0a7004a4-6ad2-4618-85e2-3d1038517220","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036119,"nanos":878754424},"http":{"id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036120,"nanos":920959071},"http":{"id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":697103807},"http":{"id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e283af40-1934-4d0c-8390-45fc91565cfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":739287899},"http":{"id":"e283af40-1934-4d0c-8390-45fc91565cfb","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":778930607},"http":{"id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36150","PortSpecifier":{"PortValue":36150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"320b3079-e186-40f7-8a4a-d926b41e5581","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36150","PortSpecifier":{"PortValue":36150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036132,"nanos":824533746},"http":{"id":"320b3079-e186-40f7-8a4a-d926b41e5581","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36160","PortSpecifier":{"PortValue":36160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36160","PortSpecifier":{"PortValue":36160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036133,"nanos":863707566},"http":{"id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53518","PortSpecifier":{"PortValue":53518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","method":"POST","path":"/ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282/v1/completions","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53518","PortSpecifier":{"PortValue":53518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036133,"nanos":898487528},"http":{"id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZlJJLIYZOWFbOcL_HeZpmPC69fnjNnayFH4JLqbfklZA8oxk7TnaOqpahZo"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8ZlJJLIYZOWFbOcL_HeZpmPC69fnjNnayFH4JLqbfklZA8oxk7TnaOqpahZo\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","keyName":"e2e-rate-b-0610ab","subscription":"e2e-rate-iso-b-0610ab","tenant":"e2e-shared-b-fcd282","userId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\",\"requestedSubscription\":\"e2e-rate-iso-b-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fcd282","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0610ab","namespace":"ai-tenant-e2e-shared-b-fcd282","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","keyName":"e2e-rate-b-0610ab","selected_subscription":"e2e-rate-iso-b-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-b-fcd282/e2e-rate-iso-b-0610ab@ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fcd282","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0610ab","namespace":"ai-tenant-e2e-shared-b-fcd282","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}