--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe"}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe"}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031"}
{"level":"debug","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe"}
{"level":"info","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"info","ts":"2026-07-05T00:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031"}
{"level":"info","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42496","PortSpecifier":{"PortValue":42496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42496","PortSpecifier":{"PortValue":42496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212390,"nanos":427636335},"http":{"id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","method":"POST","headers":{":authority":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a964b973409ff401a42b3703b30d1686e64cc00d5455d7901c52fa9f5ec34d72"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-reuse-5b7734/test-model-5b7734\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f436c18-38ec-434a-be86-cb8dbb1d57be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"961b2669-e1cf-40b3-8ebd-5511734e0366","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"961b2669-e1cf-40b3-8ebd-5511734e0366","method":"POST","path":"/maas-api/v1/api-keys/validate","host":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"961b2669-e1cf-40b3-8ebd-5511734e0366","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212390,"nanos":519438190},"http":{"id":"961b2669-e1cf-40b3-8ebd-5511734e0366","method":"POST","headers":{":authority":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/validate",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","forwarded":"for=44.212.242.249;host=e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-api-key":"sk-oai-nMfji5KKYi0vbLb5_phfEgdI6j4CHh3qpVkEcIrEucl3YR5N0PDYrWNQq1Ww","x-envoy-decorator-operation":"maas-api-e2e-reuse-5b7734.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.16","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1yZXVzZS01Yjc3MzQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLXJldXNlLTViNzczNC1vcGVuc2hpZnQtZGVmYXVsdC01ZDQ4YmZiYzU5LWhsODZuCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXJldXNlLTViNzczNC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1yZXVzZS01Yjc3MzQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.40~e2e-reuse-5b7734-openshift-default-5d48bfbc59-hl86n.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.16","x-forwarded-host":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"961b2669-e1cf-40b3-8ebd-5511734e0366"},"path":"/maas-api/v1/api-keys/validate","host":"e2e-reuse-5b7734.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"a964b973409ff401a42b3703b30d1686e64cc00d5455d7901c52fa9f5ec34d72"},"metadata_context":{}}}
{"level":"info","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"961b2669-e1cf-40b3-8ebd-5511734e0366","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-07-05T00:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"961b2669-e1cf-40b3-8ebd-5511734e0366","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-07-05T00:46:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a964b973409ff401a42b3703b30d1686e64cc00d5455d7901c52fa9f5ec34d72"}
{"level":"info","ts":"2026-07-05T00:46:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f61ee36ea137a4fc8979b4fdbfed6bbcd817ce56244dbfba45f9b85b2dfaabb6"}
{"level":"info","ts":"2026-07-05T00:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/812edd473e9cd1bea56ab73e288174fdb66222deb86489d6ac42f4cba1247ebe"}
{"level":"info","ts":"2026-07-05T00:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2c481069921ebbb63a7fe03ad1a528f981b68678d02d06fd57b6c9d366f18b"}
{"level":"info","ts":"2026-07-05T00:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5510c9fcb902626540d6c0b403a3e001583405e6f3a88a4c25024812cb7ce031"}
{"level":"info","ts":"2026-07-05T00:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f60d9ac696358695cc0215fd10eacd042c826880f498d6ff726cd90d60c3efa"}
{"level":"info","ts":"2026-07-05T00:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57520c4b07a01d2513a0578f5a3022421c88ac70f7a7600985c270ef9aaf593e"}
{"level":"info","ts":"2026-07-05T00:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/186d7d78a0703f2413de592af18b368e9c1af11f1ebfbc6b218c615fc9dc4142"}
{"level":"info","ts":"2026-07-05T00:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e64f10d235810c52b5902e96f56d63e41e012c2dcf913b411093ecee437fcf"}
{"level":"info","ts":"2026-07-05T00:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74aa5375754c3f149e234f624acaacf54dcdaaf8353c9b753a79965296ae638"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7056003cbc75dd8839a354243085ce6ecb1e8510c57964afb2d380ec7d11689"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b59cdc4de96c1b3ac6633ef2f797abeba4e47d39eae70b2ea3b1a153e0b7426"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8909113578a7d342ef4af31b4f7037592e9897c1569aff6d4fd308a1f97fcd2"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20371a391552aaa4498680efc9d30b14353903210dba612b89314dc74298937c"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b4eab20dabfc3a277ff8616cf47d638b1f5ef6815547d81ab69478d43f8bc0"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ea43ef4f59815d8e9fc8fb1f286e671a0784ebbddac8a9725e2a6e4678042ac"}
{"level":"info","ts":"2026-07-05T00:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05731a5ce28dcfaf52ef5d05ce4b345f1fee5ddbf845788e73bfc920006321f1"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14f35ee020bf49e8e0d7aa513893d309230c075d2c45c59977e7e162756f1efa"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/165c9571d1dd81bec8c3b5c300a4b1aa58e45c125918698f878dc182170011a2"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8a9b90915a38abb832425bd24a624a99f99065f25129f590ee232904fe0fc9a"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbbab81e29cda34d4427599897409ddb64c933f728ce3b4f64c83aa96b3d1f0f"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca36f4edcedf04b70c28c1a3fd5d7767e2e1b589653d9cc6d4521f5798f69a1d"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dddafbfcadb0f2ae950497888237fd969ee2a8d0ea02755ce5ffe837577d352"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db191aeee5ad38ac56387a513ec88d07df97ce433d32849558d6be19273176ee"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28d2ddecefb46f83c8640c1f2cc08f097213daafbab5a13d8f7bc046246d6c63"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fde7b383883880a4fe3e53e5a3e8f04bc13e3a8db7dbe7b6d765d883a18f592"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448d02e206c77a0c42e03abcb59bee57b05096d648f635e172a1eaa0b6b46447"}
{"level":"info","ts":"2026-07-05T00:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e731bd0a671a3f9940c04695e3e0489b12d509fd6c0dfb98e41bd59c4876286"}
{"level":"info","ts":"2026-07-05T00:48:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54cbd99053c7a6f8b0e46016d05efb7a1eb7d6f0977b2ad52ceabdbf543a34fd"}
{"level":"info","ts":"2026-07-05T00:48:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7752e40151827c7d5e23299c5991fc38836148127ec0718d43e175d584a023cf"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"info","ts":"2026-07-05T00:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"}
{"level":"info","ts":"2026-07-05T00:48:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/088c2ed5ed224782c28655d13e40d8e8a862d87fb3a315757cfdf470b722ea3a"}
{"level":"info","ts":"2026-07-05T00:48:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f80c8f01a298b4797b05c18b19d98768cf84f7bb56bc458344e04f840bbef2ee"}
{"level":"info","ts":"2026-07-05T00:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/622a4e7a92707297579df6a000b439c058f820540c6aa78babad94d92552481f"}
{"level":"info","ts":"2026-07-05T00:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d915717bdfb790ce4f68265e6e1f70809b1f3bd3f7b307f372f6c41d73d080e0"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"debug","ts":"2026-07-05T00:50:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094"}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222"}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094"}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3"}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222"}
{"level":"info","ts":"2026-07-05T00:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3"}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d"}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d"}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507"}
{"level":"error","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec514be7-66e0-4081-b564-55c6d241071d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56594","PortSpecifier":{"PortValue":56594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec514be7-66e0-4081-b564-55c6d241071d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec514be7-66e0-4081-b564-55c6d241071d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56594","PortSpecifier":{"PortValue":56594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212634,"nanos":826623427},"http":{"id":"ec514be7-66e0-4081-b564-55c6d241071d","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec514be7-66e0-4081-b564-55c6d241071d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec514be7-66e0-4081-b564-55c6d241071d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec514be7-66e0-4081-b564-55c6d241071d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec514be7-66e0-4081-b564-55c6d241071d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec514be7-66e0-4081-b564-55c6d241071d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51206","PortSpecifier":{"PortValue":51206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7374b383-d006-4561-98c1-a9aeb69b0b27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51206","PortSpecifier":{"PortValue":51206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212634,"nanos":893244941},"http":{"id":"7374b383-d006-4561-98c1-a9aeb69b0b27","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7374b383-d006-4561-98c1-a9aeb69b0b27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56606","PortSpecifier":{"PortValue":56606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","method":"GET","path":"/maas-api/v1/api-keys/fb2ccad9-fde3-476b-a196-5e5a9e406bea","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56606","PortSpecifier":{"PortValue":56606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212634,"nanos":988303725},"http":{"id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","method":"GET","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fb2ccad9-fde3-476b-a196-5e5a9e406bea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fb2ccad9-fde3-476b-a196-5e5a9e406bea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e43d8f4d-1f5c-49a1-8981-037e5d719fb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51208","PortSpecifier":{"PortValue":51208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","method":"GET","path":"/maas-api/v1/api-keys/e198e729-624e-4af8-917a-e1eb1b9280f6","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51208","PortSpecifier":{"PortValue":51208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212635,"nanos":26981978},"http":{"id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","method":"GET","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e198e729-624e-4af8-917a-e1eb1b9280f6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e198e729-624e-4af8-917a-e1eb1b9280f6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebdb88e7-f587-4237-9af7-e2cf0f4b503b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56920","PortSpecifier":{"PortValue":56920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56920","PortSpecifier":{"PortValue":56920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212652,"nanos":251603924},"http":{"id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3214b092-cf8f-4e76-8e50-a6a856275cd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44644","PortSpecifier":{"PortValue":44644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44644","PortSpecifier":{"PortValue":44644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212652,"nanos":291626633},"http":{"id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2760e9ff-00fd-455b-85ae-ebc5d4aa78a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212652,"nanos":334717833},"http":{"id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","method":"GET","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15ze8CTmqjUULSADW_OE00Y1QKj7yasevWOcRsNHv6onIfy0T9UgiGqK3myHu"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15ze8CTmqjUULSADW_OE00Y1QKj7yasevWOcRsNHv6onIfy0T9UgiGqK3myHu\"}"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cbf9d733-315c-4371-ad49-17241fa2ad7d","keyName":"e2e-auth-iso-a-2c9597","subscription":"e2e-auth-iso-ac52c5","tenant":"e2e-shared-a-3575e1","userId":"cbf9d733-315c-4371-ad49-17241fa2ad7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ac52c5"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:50:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09738aa1-4f06-49d2-a07a-4c12da8b5aed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212667,"nanos":403414107},"http":{"id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"231fd8ae-9b0f-4ccb-9394-cf9046f33a30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2722e34-8668-43b2-baa3-e54103922f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2722e34-8668-43b2-baa3-e54103922f86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2722e34-8668-43b2-baa3-e54103922f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212667,"nanos":448723658},"http":{"id":"a2722e34-8668-43b2-baa3-e54103922f86","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2722e34-8668-43b2-baa3-e54103922f86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2722e34-8668-43b2-baa3-e54103922f86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2722e34-8668-43b2-baa3-e54103922f86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2722e34-8668-43b2-baa3-e54103922f86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2722e34-8668-43b2-baa3-e54103922f86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212667,"nanos":512229383},"http":{"id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","method":"GET","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MUbJ1JJV8iqCu2Ws_eruc1UizzaRKO3MEawOlUDDPYHkWZeVCuyayhCvNHAL"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MUbJ1JJV8iqCu2Ws_eruc1UizzaRKO3MEawOlUDDPYHkWZeVCuyayhCvNHAL\"}"}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-05T00:51:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57fb98a-7f5e-4331-95e2-f6ceabc201bd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36658","PortSpecifier":{"PortValue":36658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36658","PortSpecifier":{"PortValue":36658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212684,"nanos":724975696},"http":{"id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b0a28c-4c5f-4bba-be6f-ad5fbbd14bd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46828","PortSpecifier":{"PortValue":46828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46828","PortSpecifier":{"PortValue":46828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212684,"nanos":758389745},"http":{"id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443c6f2f-a7d6-4d5a-9ccf-83e598096226","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36668","PortSpecifier":{"PortValue":36668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36668","PortSpecifier":{"PortValue":36668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212684,"nanos":815961018},"http":{"id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c2733c-5c88-4f53-b974-cc1f22e4df19","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46842","PortSpecifier":{"PortValue":46842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46842","PortSpecifier":{"PortValue":46842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212684,"nanos":848573409},"http":{"id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92ab414a-e91b-4d89-83e8-75e24b73fd01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34794","PortSpecifier":{"PortValue":34794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34794","PortSpecifier":{"PortValue":34794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212699,"nanos":915340797},"http":{"id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fe8ac91-b94a-49a8-a2f2-a75661d26848","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47868","PortSpecifier":{"PortValue":47868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47868","PortSpecifier":{"PortValue":47868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212699,"nanos":953009142},"http":{"id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"966beb79-7f60-4f7d-bbdd-f2777303d4ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47874","PortSpecifier":{"PortValue":47874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","method":"GET","path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47874","PortSpecifier":{"PortValue":47874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212699,"nanos":991208055},"http":{"id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","method":"GET","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e813e72-e9ea-4752-95b3-d0b3a337035c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34808","PortSpecifier":{"PortValue":34808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5c65390-8509-4608-91d8-a74924cf24dd","method":"GET","path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34808","PortSpecifier":{"PortValue":34808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212700,"nanos":30638449},"http":{"id":"c5c65390-8509-4608-91d8-a74924cf24dd","method":"GET","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a8b683a-1f87-4090-8389-cf5bda284f00",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5c65390-8509-4608-91d8-a74924cf24dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42500","PortSpecifier":{"PortValue":42500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42500","PortSpecifier":{"PortValue":42500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212712,"nanos":968462850},"http":{"id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd9c97b-7e8f-466a-81a5-d7c80a129e52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e8682e5-3e26-407f-94e3-fce150324baa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212713,"nanos":6901020},"http":{"id":"7e8682e5-3e26-407f-94e3-fce150324baa","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/auth-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8682e5-3e26-407f-94e3-fce150324baa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212713,"nanos":49402856},"http":{"id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aiB17ikkHulX9mI3_Q34toxVX8DeFy8fAxPGGPjx3TaCLvQTv6GcsTt1l48W"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aiB17ikkHulX9mI3_Q34toxVX8DeFy8fAxPGGPjx3TaCLvQTv6GcsTt1l48W\"}"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f6430a8-4130-4758-9fb7-e5e76c7bc63d","keyName":"e2e-auth-iso-a-1ee743","subscription":"e2e-auth-iso-dba31e","tenant":"e2e-shared-a-3575e1","userId":"2f6430a8-4130-4758-9fb7-e5e76c7bc63d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/auth-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dba31e"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:51:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c608f97e-52ad-45e1-b20b-0a5f812d6d9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0979d9eb97363a1dd9913df101120e5bef641fdc040990790dc12d11bff97169"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b025f272a36e57ff8f8e2ce2f4ce2d4d31b083cef767668d20d30b448e7b9d"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3225e4939f50b65e3c6fedf7197d5f3be6b69c6afbb46d39e75f88ea8d9e507"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/475ffd8ccb10a9960218446b4d5fe7d0d0d6cb9f36ae0b732c1cbc7da9efcaf7"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/537e36fb86b422e4e1385e96193c209301eb6308ca6faaefac22b404a2f026c0"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ae3e693f9e2fab158d1e62f43771a6af0a78ef3f6327aa64e7f56fb525aef03"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/944dabc448ba9ffabab3ee8792821a432af9814dd455901c813a666914838fd3"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6443e1435e241a9afff7c58b455bbe61c0b754202565c8c40e5350808d01c094"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2e84bac0ad9b9055ac53800f42b896db2f00c07f1e61d274dcee9bdb16a7684"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/014cfe0650dba26bf10b8c1fe684ccc132092bcfa814f9857742af7201ef773e"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dca4dbf88491129049e414abe98f7bd9c3d5fb6fa4e3e08636eddbd76e4f45d8"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e748a5063e92fd80234782add6cc0f68891ace32291f880d1874a07d277bfa6"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74fb9a64606e55f93351db5f522831ecd198c5af9537c390096812ba523d40d5"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed3063d524792e594f27b15687a316416be8a85174a74e3f345ac113e139b06"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f01ad870816c86a7c83501140352495d600aa5aea4c8fa1c03d4ad43909dc57d"}
{"level":"info","ts":"2026-07-05T00:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc86e78b66cbada50db4b38cce75421713872eeb7cac1a499be542306d47a222"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"info","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"debug","ts":"2026-07-05T00:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"debug","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527"}
{"level":"info","ts":"2026-07-05T00:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e"}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"debug","ts":"2026-07-05T00:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"}
{"level":"debug","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527"}
{"level":"info","ts":"2026-07-05T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42868","PortSpecifier":{"PortValue":42868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42868","PortSpecifier":{"PortValue":42868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212782,"nanos":100682173},"http":{"id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/sub-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eebb450f-96ed-4a68-b50c-3b1a342d8a7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37098","PortSpecifier":{"PortValue":37098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37098","PortSpecifier":{"PortValue":37098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212782,"nanos":149732162},"http":{"id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/sub-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590eb7ab-58f1-47a4-bfce-60047873ebb7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42878","PortSpecifier":{"PortValue":42878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42878","PortSpecifier":{"PortValue":42878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212782,"nanos":194502902},"http":{"id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","method":"GET","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eGxCSKXHZNlG45Gc_OsSrbft08FXEwyzG3SqObGxzopYHxus0iQD2DEL8cXY"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eGxCSKXHZNlG45Gc_OsSrbft08FXEwyzG3SqObGxzopYHxus0iQD2DEL8cXY\"}"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f703b85b-2fb5-4515-baad-99af06928073","keyName":"e2e-sub-iso-de2ba0","subscription":"e2e-a-only-190473","tenant":"e2e-shared-a-3575e1","userId":"f703b85b-2fb5-4515-baad-99af06928073","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/sub-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-190473"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b208e662-e35b-48ac-a9ac-e3a7b2cd737d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212782,"nanos":235278064},"http":{"id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","method":"GET","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AcwWxbozexvBEQo2_HyOeE3hIdqQi1oTYfsfHn0TzS0JaiJfb0YGzmgxXL4a"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AcwWxbozexvBEQo2_HyOeE3hIdqQi1oTYfsfHn0TzS0JaiJfb0YGzmgxXL4a\"}"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c254baec-8f36-4cd9-8498-e3aba7941825","keyName":"e2e-sub-iso-23b472","subscription":"e2e-b-only-190473","tenant":"e2e-shared-b-1a1f49","userId":"c254baec-8f36-4cd9-8498-e3aba7941825","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/sub-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-190473"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e32e536d-e44e-41e9-88c8-e3dc7ec0ee2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212800,"nanos":785490933},"http":{"id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/sub-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"012d5645-cb04-45e9-bc5b-a9eb6579ba56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6e0462-a5de-4097-9701-43746ab37265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44862","PortSpecifier":{"PortValue":44862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f6e0462-a5de-4097-9701-43746ab37265","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6e0462-a5de-4097-9701-43746ab37265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44862","PortSpecifier":{"PortValue":44862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212800,"nanos":828562102},"http":{"id":"6f6e0462-a5de-4097-9701-43746ab37265","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f6e0462-a5de-4097-9701-43746ab37265","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f6e0462-a5de-4097-9701-43746ab37265","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/sub-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6e0462-a5de-4097-9701-43746ab37265","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6e0462-a5de-4097-9701-43746ab37265","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6e0462-a5de-4097-9701-43746ab37265","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2a422b7-9401-4815-a356-8689c57b9377","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2a422b7-9401-4815-a356-8689c57b9377","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2a422b7-9401-4815-a356-8689c57b9377","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212800,"nanos":876926325},"http":{"id":"e2a422b7-9401-4815-a356-8689c57b9377","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p42Ovwm4mpw7SiDt_fkll9dE23t1Fa8oZQuJKiiwrwNwjGp6Zg5eKPKr1AKW"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p42Ovwm4mpw7SiDt_fkll9dE23t1Fa8oZQuJKiiwrwNwjGp6Zg5eKPKr1AKW\"}"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"920c7fd2-146f-456e-9a5e-43d3083f6b07","keyName":"e2e-sub-iso-a7d0d9","subscription":"e2e-shared-sub-2f8398","tenant":"e2e-shared-a-3575e1","userId":"920c7fd2-146f-456e-9a5e-43d3083f6b07","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2a422b7-9401-4815-a356-8689c57b9377","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/sub-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2f8398"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2a422b7-9401-4815-a356-8689c57b9377","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2a422b7-9401-4815-a356-8689c57b9377","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2a422b7-9401-4815-a356-8689c57b9377","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afd79b8a-de13-46fc-95d2-7108612072c1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212800,"nanos":908112228},"http":{"id":"afd79b8a-de13-46fc-95d2-7108612072c1","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ljuR4zLUOPRNpijU_uXwOszcJpNR62emu6eNeVBd2r90ZUqflMzBWFG7zdDd"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ljuR4zLUOPRNpijU_uXwOszcJpNR62emu6eNeVBd2r90ZUqflMzBWFG7zdDd\"}"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7fae14a3-476b-45ea-a1d6-dce314e02eed","keyName":"e2e-sub-iso-fffd5a","subscription":"e2e-shared-sub-2f8398","tenant":"e2e-shared-b-1a1f49","userId":"7fae14a3-476b-45ea-a1d6-dce314e02eed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/sub-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2f8398"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd79b8a-de13-46fc-95d2-7108612072c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"error","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0a4f2567c61db8b2a11542cb2807980b937f293064ebc93b431a7c155ae41fa"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca727121de8502c36e0b747c1937b017875c9132b2714a6d30fc3e4f5d404c06"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f897f64b995eedc9c474c2f5c6e52808ccf2f5cfc955844c0219bd695c51d0f"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f726ff13e43f2b66e08c5fa9f529bbb9d46e76df372a066f64773f8c3b5a406e"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f2540db1bc2fc3f50d7a0afb03ac16a2a95ad6407f3f5eb8cbe319e39c40527"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95ef2a455587c7d226dd935107afc72e50b6fa65ceda1b8dcf0d113870cb1381"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eab74278a2e9040eeb2198e34d8f38aff7fd376f70dbd74fda4ad989b0c8d761"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03a4d1f3d02da0229c01d49970e68b3bb428b94107befbf3c6a0588b9e3c7fb7"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9db0cf1289c26971329037f44e0b21b138dbe1f40a662357c29a2a487724ab10"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f34bc718a84e93717269ebb511eef24e41b8374d3d6f510cb675cd6e3ba63877"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/767397fab062c94d04d849f44f37b1c8db21bf0296d6a9233a41578e13d54c02"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/263633b756f14b32585c7ad01dfac19306c2d8983dd1d172cd90aef9fe1eed38"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af55507ad5944a0283d6ec242daf04334ba9f37175e0043e947b6f393802ddaa"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edd7ea34b1aca756df829461c131a1745102a95e8a9eb1627fc3a5bd6763bc57"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30447d325586a1f5b375ba29a7b4c20608d766a60f6981b4b0a4d59ef660b588"}
{"level":"info","ts":"2026-07-05T00:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8a773626f680ef28709d247b46a1073e9f42e63f5277f3ea17655f9f01c4853"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"error","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T00:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}
{"level":"info","ts":"2026-07-05T00:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e"}
{"level":"info","ts":"2026-07-05T00:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"}
{"level":"info","ts":"2026-07-05T00:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564f0300-e94e-4edb-b505-2dae709235b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"564f0300-e94e-4edb-b505-2dae709235b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564f0300-e94e-4edb-b505-2dae709235b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38100","PortSpecifier":{"PortValue":38100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212863,"nanos":712801376},"http":{"id":"564f0300-e94e-4edb-b505-2dae709235b2","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"564f0300-e94e-4edb-b505-2dae709235b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"564f0300-e94e-4edb-b505-2dae709235b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564f0300-e94e-4edb-b505-2dae709235b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564f0300-e94e-4edb-b505-2dae709235b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564f0300-e94e-4edb-b505-2dae709235b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab82204c-7355-493f-bdf8-61893084d184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38440","PortSpecifier":{"PortValue":38440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab82204c-7355-493f-bdf8-61893084d184","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab82204c-7355-493f-bdf8-61893084d184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38440","PortSpecifier":{"PortValue":38440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212863,"nanos":752391198},"http":{"id":"ab82204c-7355-493f-bdf8-61893084d184","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab82204c-7355-493f-bdf8-61893084d184","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab82204c-7355-493f-bdf8-61893084d184","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab82204c-7355-493f-bdf8-61893084d184","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab82204c-7355-493f-bdf8-61893084d184","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab82204c-7355-493f-bdf8-61893084d184","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38110","PortSpecifier":{"PortValue":38110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75f416e0-8634-45a2-83dc-6cce8ea01135","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38110","PortSpecifier":{"PortValue":38110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212863,"nanos":802048860},"http":{"id":"75f416e0-8634-45a2-83dc-6cce8ea01135","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV\"}"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","subscription":"e2e-rate-iso-a-d4be9e","tenant":"e2e-shared-a-3575e1","userId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-d4be9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4be9e"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","selected_subscription":"e2e-rate-iso-a-d4be9e","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-d4be9e@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75f416e0-8634-45a2-83dc-6cce8ea01135","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65251e75-ff36-406e-8a97-ded3e431962e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38120","PortSpecifier":{"PortValue":38120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65251e75-ff36-406e-8a97-ded3e431962e","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65251e75-ff36-406e-8a97-ded3e431962e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38120","PortSpecifier":{"PortValue":38120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212864,"nanos":860431600},"http":{"id":"65251e75-ff36-406e-8a97-ded3e431962e","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV\"}"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","subscription":"e2e-rate-iso-a-d4be9e","tenant":"e2e-shared-a-3575e1","userId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-d4be9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65251e75-ff36-406e-8a97-ded3e431962e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4be9e"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65251e75-ff36-406e-8a97-ded3e431962e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","selected_subscription":"e2e-rate-iso-a-d4be9e","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-d4be9e@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65251e75-ff36-406e-8a97-ded3e431962e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65251e75-ff36-406e-8a97-ded3e431962e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38130","PortSpecifier":{"PortValue":38130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38130","PortSpecifier":{"PortValue":38130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212865,"nanos":898468706},"http":{"id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taOqidu0lVpWxbo0_BW6UZ5fQSrm8Qcyqn6ParyZyVvXVXYqke1JlLDfDffV\"}"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","subscription":"e2e-rate-iso-a-d4be9e","tenant":"e2e-shared-a-3575e1","userId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-d4be9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4be9e"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bf412cf6-49f2-49ee-ac98-fe3ab5c64050","keyName":"e2e-rate-a-d4be9e","selected_subscription":"e2e-rate-iso-a-d4be9e","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-d4be9e@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4be9e","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96ad1c97-0f57-410c-90c1-f799cc70f89d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40852","PortSpecifier":{"PortValue":40852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40852","PortSpecifier":{"PortValue":40852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212876,"nanos":868873339},"http":{"id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4dd69b3-7f0c-452d-9851-36a6644f526b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cb0010e-4078-40de-9914-3c230cd7eb55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212876,"nanos":909250359},"http":{"id":"9cb0010e-4078-40de-9914-3c230cd7eb55","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"]}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8b9c018590ea"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6fda763f-cea3-436a-bb47-152e8a30514b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07b8cb94-a830-4ad6-b742-0c9d8a8630ab","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb0010e-4078-40de-9914-3c230cd7eb55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40858","PortSpecifier":{"PortValue":40858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1494a24-b217-421c-a4f3-d82f03473a45","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40858","PortSpecifier":{"PortValue":40858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212876,"nanos":950590621},"http":{"id":"f1494a24-b217-421c-a4f3-d82f03473a45","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P\"}"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","subscription":"e2e-rate-iso-a-992649","tenant":"e2e-shared-a-3575e1","userId":"843e9ad3-3171-4902-a166-beb5cddb758a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-992649\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992649"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","selected_subscription":"e2e-rate-iso-a-992649","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-992649@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1494a24-b217-421c-a4f3-d82f03473a45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40874","PortSpecifier":{"PortValue":40874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40874","PortSpecifier":{"PortValue":40874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212877,"nanos":986130789},"http":{"id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P\"}"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","subscription":"e2e-rate-iso-a-992649","tenant":"e2e-shared-a-3575e1","userId":"843e9ad3-3171-4902-a166-beb5cddb758a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-992649\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992649"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","selected_subscription":"e2e-rate-iso-a-992649","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-992649@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21261322-8f67-4ef9-8220-dc660c0cfd4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57702","PortSpecifier":{"PortValue":57702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","method":"POST","path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions","host":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57702","PortSpecifier":{"PortValue":57702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212879,"nanos":24964370},"http":{"id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","method":"POST","headers":{":authority":"e2e-shared-a-3575e1.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LxcckxdACVyRm8b1_5Mewsx2oD0TUZFFGEnmLv1RsuMIpMGyTWdKAYiZlG1P\"}"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","subscription":"e2e-rate-iso-a-992649","tenant":"e2e-shared-a-3575e1","userId":"843e9ad3-3171-4902-a166-beb5cddb758a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\",\"requestedSubscription\":\"e2e-rate-iso-a-992649\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3575e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992649"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"843e9ad3-3171-4902-a166-beb5cddb758a","keyName":"e2e-rate-a-992649","selected_subscription":"e2e-rate-iso-a-992649","selected_subscription_key":"ai-tenant-e2e-shared-a-3575e1/e2e-rate-iso-a-992649@ai-tenant-e2e-shared-a-3575e1/rate-test-model-3575e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3575e1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992649","namespace":"ai-tenant-e2e-shared-a-3575e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fda505-ee64-4a7c-9b8d-ce6940e6e1c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","method":"POST","path":"/ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49/v1/completions","host":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783212879,"nanos":66484624},"http":{"id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","method":"POST","headers":{":authority":"e2e-shared-b-1a1f49.apps.28088c15-3a47-4083-9daf-8b9c018590ea.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11G3Ussq05TaGLGxY_RVCTobCp83w5lX4RiLaATf7QyRazvfObTeiPQXTU4X8"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11G3Ussq05TaGLGxY_RVCTobCp83w5lX4RiLaATf7QyRazvfObTeiPQXTU4X8\"}"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59a29033-daee-416c-a8b0-6f93d56c7014","keyName":"e2e-rate-b-992649","subscription":"e2e-rate-iso-b-992649","tenant":"e2e-shared-b-1a1f49","userId":"59a29033-daee-416c-a8b0-6f93d56c7014","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49\",\"requestedSubscription\":\"e2e-rate-iso-b-992649\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1a1f49.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a1f49","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-992649","namespace":"ai-tenant-e2e-shared-b-1a1f49","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-992649"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59a29033-daee-416c-a8b0-6f93d56c7014","keyName":"e2e-rate-b-992649","selected_subscription":"e2e-rate-iso-b-992649","selected_subscription_key":"ai-tenant-e2e-shared-b-1a1f49/e2e-rate-iso-b-992649@ai-tenant-e2e-shared-b-1a1f49/rate-test-model-1a1f49","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a1f49","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-992649","namespace":"ai-tenant-e2e-shared-b-1a1f49","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T00:54:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33802d8c-ec71-4743-bce9-7b747bbdc0f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6c486449d2ddff2e145348909fde6978be301be608c8108ab5efb57d734e680"}
{"level":"info","ts":"2026-07-05T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aba3a661dcb78c6ac6e611d799ef0f00ef4e449def75e7e38497e27cc7e8352e"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ad1029e5d4c71b79181a8ed185dee7a589ad4b4adcb722974e54e879570cc0"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d641df9823b66727a0dc3880ea8af367891581b2907ee3b220578167d3393550"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa245d09726ee5c9b03ef71e12934d959732404946ba2ed6f323e9e514cecc7"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e195945e28801db67446e75e14a6c5cd2da22590a1f5c4f17f23c8631b375ab"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a213f27949c3a53039e0b99a8ceb072d2282499691340dbcaf9a209100e805a5"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62886044dc87cc0e5e1dbef44c431f798e47fe29b1b20d93a9953618fb2b7c5a"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b78c2bf8935359f75e352263e08827a0fed7d24725a49078b975147080fce8"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91deb8c4fc2f4b638bcc931207efe53d43e50c147be63c03f3442c7844e40526"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be85dcde8be7288860e8f25f40ab95db7945ad56dc872328fd83012cd2df998a"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465645752f40fdd24de69f217e9d554480d2e66001bb1a9d35b34010a8cc3264"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7001e9db1ba466312cffffc515b8905fc9c563cc1233d7e3360f11ad888ff44b"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c64ac83ef070bf631381c6d413774716b9aa97a299d403df0d8f81ce86b4ecc"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7b7ea877e2475269a9351a0b441714b8f11a7cc480629518eb50cabc208b85e"}
{"level":"info","ts":"2026-07-05T00:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c834075c2b998e6e17d3e69ea97b369f066cac3f19f5e12bfb191e9c13700fe"}
{"level":"info","ts":"2026-07-05T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70369fd3ceadf47376ab06334d5b30a750d9ce1ccd18a12a9ac50d3a3832a71a"}
{"level":"info","ts":"2026-07-05T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feaa4eed56d6511eeff44bbcc83ce54edd1246eb47821d86a9112808dc8d85f3"}
{"level":"info","ts":"2026-07-05T00:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f5fd10c88cd114ef5a399c0d0bbae33669cb6bae2767b2829555b2d42cd48f8"}
{"level":"info","ts":"2026-07-05T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9d625d8e8341a9233b2996049be85a5c05c3c0f049c9c37791796b721ff8fd0"}