--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40404","PortSpecifier":{"PortValue":40404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40404","PortSpecifier":{"PortValue":40404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673006,"nanos":357928724},"http":{"id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d03a2b5f-e630-4d2c-aaf3-71f13127256b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385586e4-23c0-43f5-b379-94135da4abcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43492","PortSpecifier":{"PortValue":43492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"385586e4-23c0-43f5-b379-94135da4abcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385586e4-23c0-43f5-b379-94135da4abcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43492","PortSpecifier":{"PortValue":43492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673006,"nanos":399763361},"http":{"id":"385586e4-23c0-43f5-b379-94135da4abcb","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"385586e4-23c0-43f5-b379-94135da4abcb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"385586e4-23c0-43f5-b379-94135da4abcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385586e4-23c0-43f5-b379-94135da4abcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385586e4-23c0-43f5-b379-94135da4abcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385586e4-23c0-43f5-b379-94135da4abcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40410","PortSpecifier":{"PortValue":40410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee1f2e15-28de-4116-b715-fd1090232fa4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40410","PortSpecifier":{"PortValue":40410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673006,"nanos":441946145},"http":{"id":"ee1f2e15-28de-4116-b715-fd1090232fa4","method":"GET","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RyWnkw4Z69gWSrRk_nrCdg0w5gzWW6RAGkAOCNIGOwW2AA3jboCU1fOYZ4oL"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RyWnkw4Z69gWSrRk_nrCdg0w5gzWW6RAGkAOCNIGOwW2AA3jboCU1fOYZ4oL\"}"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"34e87073-6dcd-48b5-b4b1-e8cd3f64a5fd","keyName":"e2e-auth-iso-a-d4377e","subscription":"e2e-auth-iso-809a05","tenant":"e2e-shared-a-131f31","userId":"34e87073-6dcd-48b5-b4b1-e8cd3f64a5fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-809a05"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1f2e15-28de-4116-b715-fd1090232fa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54884","PortSpecifier":{"PortValue":54884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7841b8ea-ef63-4840-8633-fb6993034ccc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54884","PortSpecifier":{"PortValue":54884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673025,"nanos":688170788},"http":{"id":"7841b8ea-ef63-4840-8633-fb6993034ccc","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7841b8ea-ef63-4840-8633-fb6993034ccc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55288","PortSpecifier":{"PortValue":55288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18e44850-ac9c-4e87-a703-7017476aa0ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55288","PortSpecifier":{"PortValue":55288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673025,"nanos":733959826},"http":{"id":"18e44850-ac9c-4e87-a703-7017476aa0ec","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18e44850-ac9c-4e87-a703-7017476aa0ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673025,"nanos":774522779},"http":{"id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","method":"GET","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d6icmITRYOl8swUq_KkFiGvnSmeCaIoggQzxfyJGtsZ6Onmh7Ydp9wc1eSMT"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d6icmITRYOl8swUq_KkFiGvnSmeCaIoggQzxfyJGtsZ6Onmh7Ydp9wc1eSMT\"}"}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-21T22:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b9dacf-560d-4b17-afc2-59f4af3ee195","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-21T22:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"error","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41596","PortSpecifier":{"PortValue":41596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41596","PortSpecifier":{"PortValue":41596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673045,"nanos":75583236},"http":{"id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465d74a8-ce1f-4b6b-86f7-cbd2d06aa0d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60300","PortSpecifier":{"PortValue":60300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60300","PortSpecifier":{"PortValue":60300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673045,"nanos":147814627},"http":{"id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86d43cc5-c395-46f1-84c3-d5bd678b0109","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673045,"nanos":186928014},"http":{"id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef7943f-c9f8-4593-b126-acc2bf91ca59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60306","PortSpecifier":{"PortValue":60306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60306","PortSpecifier":{"PortValue":60306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673045,"nanos":261637918},"http":{"id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08c0fb1b-c6e1-40f6-961f-125dded4c749","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7536a82c-aae5-470b-a34b-d38234e30a75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673062,"nanos":378927647},"http":{"id":"7536a82c-aae5-470b-a34b-d38234e30a75","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7536a82c-aae5-470b-a34b-d38234e30a75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59674","PortSpecifier":{"PortValue":59674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59674","PortSpecifier":{"PortValue":59674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673062,"nanos":429012591},"http":{"id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba731a60-f3b3-417c-9c74-35f5c8935a2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87571eda-4fc4-457a-a3a1-454545609a1e","method":"GET","path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673062,"nanos":476210313},"http":{"id":"87571eda-4fc4-457a-a3a1-454545609a1e","method":"GET","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87571eda-4fc4-457a-a3a1-454545609a1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60320","PortSpecifier":{"PortValue":60320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"330baba1-18ef-411c-80fa-332e60af8f1f","method":"GET","path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60320","PortSpecifier":{"PortValue":60320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673062,"nanos":510753214},"http":{"id":"330baba1-18ef-411c-80fa-332e60af8f1f","method":"GET","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d86b7edf-cf56-4cca-8b36-2e831f385346",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330baba1-18ef-411c-80fa-332e60af8f1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"error","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"error","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"error","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"error","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"error","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f41a206-7018-475c-8525-9fb37ae05ad4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673077,"nanos":574625178},"http":{"id":"9f41a206-7018-475c-8525-9fb37ae05ad4","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f41a206-7018-475c-8525-9fb37ae05ad4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51318","PortSpecifier":{"PortValue":51318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51318","PortSpecifier":{"PortValue":51318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673077,"nanos":612763279},"http":{"id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/auth-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aba4ed1-ea5d-437c-9d07-ae0f21928923","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47374","PortSpecifier":{"PortValue":47374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47374","PortSpecifier":{"PortValue":47374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673077,"nanos":650416345},"http":{"id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PgfJDOtfwrQjfMt9_P8rvJeKXAUhGZjwa3tq0RIXVLeR4lRlgaqTGWGdYMW5"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PgfJDOtfwrQjfMt9_P8rvJeKXAUhGZjwa3tq0RIXVLeR4lRlgaqTGWGdYMW5\"}"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84bef012-f5fa-4ae1-8c73-32f4a06e318a","keyName":"e2e-auth-iso-a-6db1d2","subscription":"e2e-auth-iso-3566d7","tenant":"e2e-shared-a-131f31","userId":"84bef012-f5fa-4ae1-8c73-32f4a06e318a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/auth-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3566d7"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4111e0df-afd6-41fc-b820-e5b4b59fa736","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e75c34862a575d88340d15f8671b2bc9b078f6de80aba022c1cddee3f70515c"}
{"level":"info","ts":"2026-07-21T22:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62bc2aa5d76eea92eae3b1ba9905d8965a863e013fcd9b8dc0f1449c108c8c53"}
{"level":"info","ts":"2026-07-21T22:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1f168a57a93fd401f85669b27723e9aa94cfac0733c5e092b819826fe56c6d"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2fa3459cc8117b9bfe9a2e00554cb583461c8affe5906c9bc3a5ece60875e94"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aafe353456df27938828d0ede6cf4c854906fb7d6c1e1c22d5cd3db890fb291"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba2ee6f7009be442e4838c463e4b65a37ce64b1384cfda34bcea440545e681c"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5341b9339f745f280f58076182fd5b2dd9e56593479f99650250137fe282bd7"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/674e4b9127e81586b599abbbc16e647b1b48c1a4466a5710f8bac97667c4d432"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d2669c3d5af9fadc879db6fb52d16ecc2abbb6bff768a62458fd985ffe5ba"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef020f71ef999d4999175da4dd4d81798b91a92dc7c875fcf7ed2fd0d7e753ab"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ec1b931ce8a99611b10101065f44e7b580dca3d0f7a43d98f3ceca219b6455"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b1b1086b9c4e70c6afae14f80c36b47e90bc1a598d80214dc0365d1a7bffc0"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8da0b66a7108c6da3f09a5e510400dfb9a82b4046ea5a88fa3bc7bb6d57a0590"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd014964eab2a33435e4278c53d55f77ea1aa1e86916329c6b968244ac0d30e9"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f451e728909501eee9da7ca82457d264218d2bd0785989f3df47215f088c2386"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763a31de020582780b28be7f076f0e9441c1c7105d0dfc0bd4b06d31aab6616"}
{"level":"info","ts":"2026-07-21T22:31:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"debug","ts":"2026-07-21T22:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"error","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76"}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"error","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa"}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef"}
{"level":"info","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"info","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"debug","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673146,"nanos":709445091},"http":{"id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/sub-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60e4352-efeb-4940-a4bf-5ae5b9384d14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45660","PortSpecifier":{"PortValue":45660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45660","PortSpecifier":{"PortValue":45660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673146,"nanos":751757728},"http":{"id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/sub-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0afaa1-aff8-4c55-b154-e33c1e087a9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50776","PortSpecifier":{"PortValue":50776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50776","PortSpecifier":{"PortValue":50776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673146,"nanos":789556413},"http":{"id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","method":"GET","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nfVyFESxBFn17PHy_d6dbDkmOSVuYUMbuF9Ufbbsi9ndsZdChC8Ey58mC2TF"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nfVyFESxBFn17PHy_d6dbDkmOSVuYUMbuF9Ufbbsi9ndsZdChC8Ey58mC2TF\"}"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8572475f-babd-4764-b044-5aa54f715235","keyName":"e2e-sub-iso-e4400a","subscription":"e2e-a-only-36db34","tenant":"e2e-shared-a-131f31","userId":"8572475f-babd-4764-b044-5aa54f715235","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/sub-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-36db34"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da64d7f2-80f7-40cd-a047-dacf1d621cc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45674","PortSpecifier":{"PortValue":45674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45674","PortSpecifier":{"PortValue":45674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673146,"nanos":833285905},"http":{"id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","method":"GET","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s6rUEB09KCGpzvUz_eG21GWzfa0IHads2LjIWw9zBBwMmRbamRmPtLqak9kI"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s6rUEB09KCGpzvUz_eG21GWzfa0IHads2LjIWw9zBBwMmRbamRmPtLqak9kI\"}"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a8862064-9142-4763-a082-a7bef062be0e","keyName":"e2e-sub-iso-764f92","subscription":"e2e-b-only-36db34","tenant":"e2e-shared-b-b77603","userId":"a8862064-9142-4763-a082-a7bef062be0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/sub-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-36db34"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d33dbee-c4e4-43b9-a359-0e8e1d5ee175","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40842","PortSpecifier":{"PortValue":40842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40842","PortSpecifier":{"PortValue":40842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673165,"nanos":364562443},"http":{"id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/sub-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e2d03e-e8b5-4799-9ecc-ac345ac5e676","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55248","PortSpecifier":{"PortValue":55248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1b179b3-9509-9a2c-a672-0155e996e25f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55248","PortSpecifier":{"PortValue":55248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673165,"nanos":406482925},"http":{"id":"f1b179b3-9509-9a2c-a672-0155e996e25f","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/sub-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b179b3-9509-9a2c-a672-0155e996e25f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff3f24f-243a-4281-8d45-071156168807","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40850","PortSpecifier":{"PortValue":40850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff3f24f-243a-4281-8d45-071156168807","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff3f24f-243a-4281-8d45-071156168807","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40850","PortSpecifier":{"PortValue":40850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673165,"nanos":443421188},"http":{"id":"1ff3f24f-243a-4281-8d45-071156168807","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmLKnamgqT3LMGR6_EKZaNSjgaoXAnB9nm9Qc4dE870p0N6ll0nwaHB4uAb0"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BmLKnamgqT3LMGR6_EKZaNSjgaoXAnB9nm9Qc4dE870p0N6ll0nwaHB4uAb0\"}"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd54fc96-acc3-48cb-946c-4adf1b02fb54","keyName":"e2e-sub-iso-2299b6","subscription":"e2e-shared-sub-ecd805","tenant":"e2e-shared-a-131f31","userId":"bd54fc96-acc3-48cb-946c-4adf1b02fb54","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff3f24f-243a-4281-8d45-071156168807","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/sub-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ecd805"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff3f24f-243a-4281-8d45-071156168807","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff3f24f-243a-4281-8d45-071156168807","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff3f24f-243a-4281-8d45-071156168807","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"065c5d96-611b-4f38-bac2-9faf5a433de0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673165,"nanos":472297013},"http":{"id":"065c5d96-611b-4f38-bac2-9faf5a433de0","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lX4NZmK3DHO3PDn0_gvzQhReyIJScB4GKuYWE5DpvsKKsUb3PmRL2Z0bCto3"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lX4NZmK3DHO3PDn0_gvzQhReyIJScB4GKuYWE5DpvsKKsUb3PmRL2Z0bCto3\"}"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aed0524-ef96-4be3-89f6-ed28e871b769","keyName":"e2e-sub-iso-0a2b39","subscription":"e2e-shared-sub-ecd805","tenant":"e2e-shared-b-b77603","userId":"2aed0524-ef96-4be3-89f6-ed28e871b769","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/sub-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ecd805"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065c5d96-611b-4f38-bac2-9faf5a433de0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52a168384ff06d1d5c1407b9a07eb9c3b3e1e36ae733d5f5486719f79e597a25"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/161a1d9b95ff688469fda4efd4e2aeb498aafb215e1319ad5738fd86054f3053"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b64f2a1ee2fbe88847b2027b788f6605e57d11d5664281af145a24d7800d49fa"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":885065834},"http":{"id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":930211678},"http":{"id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47038","PortSpecifier":{"PortValue":47038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dd23c39-76bf-4313-8525-131f885d4ea6","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47038","PortSpecifier":{"PortValue":47038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":970333584},"http":{"id":"5dd23c39-76bf-4313-8525-131f885d4ea6","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47054","PortSpecifier":{"PortValue":47054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35799d1e-1deb-49f6-bb74-51df32fafad0","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47054","PortSpecifier":{"PortValue":47054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673225,"nanos":24943829},"http":{"id":"35799d1e-1deb-49f6-bb74-51df32fafad0","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0b999a-d096-420d-a957-5407e923b907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47070","PortSpecifier":{"PortValue":47070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e0b999a-d096-420d-a957-5407e923b907","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0b999a-d096-420d-a957-5407e923b907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47070","PortSpecifier":{"PortValue":47070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673226,"nanos":61683639},"http":{"id":"0e0b999a-d096-420d-a957-5407e923b907","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e0b999a-d096-420d-a957-5407e923b907","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0b999a-d096-420d-a957-5407e923b907","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0b999a-d096-420d-a957-5407e923b907","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":1926148},"http":{"id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":43076220},"http":{"id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79464ab-d67c-4619-99ca-4c29f0153cba","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":81565576},"http":{"id":"f79464ab-d67c-4619-99ca-4c29f0153cba","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62a58ca3-a542-4292-b578-ac95440a188d","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673240,"nanos":122833334},"http":{"id":"62a58ca3-a542-4292-b578-ac95440a188d","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62a58ca3-a542-4292-b578-ac95440a188d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a58ca3-a542-4292-b578-ac95440a188d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a58ca3-a542-4292-b578-ac95440a188d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53892","PortSpecifier":{"PortValue":53892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53892","PortSpecifier":{"PortValue":53892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673241,"nanos":160573976},"http":{"id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50484","PortSpecifier":{"PortValue":50484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","method":"POST","path":"/ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603/v1/completions","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50484","PortSpecifier":{"PortValue":50484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673241,"nanos":202612361},"http":{"id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WgGm0e3OFmPIkjj9_5vO2DFNAXdxlOwyaq4ZziNh4IvBu8sugSifWGgD9BcN"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WgGm0e3OFmPIkjj9_5vO2DFNAXdxlOwyaq4ZziNh4IvBu8sugSifWGgD9BcN\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","keyName":"e2e-rate-b-ecbcd2","subscription":"e2e-rate-iso-b-ecbcd2","tenant":"e2e-shared-b-b77603","userId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\",\"requestedSubscription\":\"e2e-rate-iso-b-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b77603","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecbcd2","namespace":"ai-tenant-e2e-shared-b-b77603","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603"}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","keyName":"e2e-rate-b-ecbcd2","selected_subscription":"e2e-rate-iso-b-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-b-b77603/e2e-rate-iso-b-ecbcd2@ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b77603","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecbcd2","namespace":"ai-tenant-e2e-shared-b-b77603","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}