--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"debug","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55426","PortSpecifier":{"PortValue":55426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"330a64d8-291b-458d-be56-fc841b9c9a54","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55426","PortSpecifier":{"PortValue":55426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336442,"nanos":141045647},"http":{"id":"330a64d8-291b-458d-be56-fc841b9c9a54","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330a64d8-291b-458d-be56-fc841b9c9a54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38862","PortSpecifier":{"PortValue":38862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38862","PortSpecifier":{"PortValue":38862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336442,"nanos":182935202},"http":{"id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/auth-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"842a9d2a-e8fe-4105-a346-6efda6cf7cce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55436","PortSpecifier":{"PortValue":55436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55436","PortSpecifier":{"PortValue":55436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336442,"nanos":228826584},"http":{"id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8f6a94-d0d8-465d-9ad8-7dcb39257a00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38864","PortSpecifier":{"PortValue":38864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38864","PortSpecifier":{"PortValue":38864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336442,"nanos":268702993},"http":{"id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/auth-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ab4dab-b9f8-46ad-acaa-381f392b8f35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:47:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"error","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:47:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:47:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56106","PortSpecifier":{"PortValue":56106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56106","PortSpecifier":{"PortValue":56106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336488,"nanos":320617766},"http":{"id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28349f3-a4ae-4c48-bd59-c5b91ac0e0f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80e287c0-ed8f-442f-8173-d209fc5991d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336488,"nanos":365355109},"http":{"id":"80e287c0-ed8f-442f-8173-d209fc5991d5","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/auth-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e287c0-ed8f-442f-8173-d209fc5991d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","method":"GET","path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336488,"nanos":412571188},"http":{"id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","method":"GET","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/auth-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1cf3c66-26fa-4b8e-a8d0-2f7c8cbff8e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56120","PortSpecifier":{"PortValue":56120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","method":"GET","path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56120","PortSpecifier":{"PortValue":56120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336488,"nanos":448015053},"http":{"id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","method":"GET","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/372a679c-5b02-4563-a5a0-0cad86c178b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a0df7b3-c316-4af8-96ad-5472dd37a50d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"error","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"debug","ts":"2026-07-29T14:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:48:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:48:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13db69e-f001-4543-b69a-ef9b97899364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49190","PortSpecifier":{"PortValue":49190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b13db69e-f001-4543-b69a-ef9b97899364","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13db69e-f001-4543-b69a-ef9b97899364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49190","PortSpecifier":{"PortValue":49190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336529,"nanos":338752428},"http":{"id":"b13db69e-f001-4543-b69a-ef9b97899364","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b13db69e-f001-4543-b69a-ef9b97899364","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b13db69e-f001-4543-b69a-ef9b97899364","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13db69e-f001-4543-b69a-ef9b97899364","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13db69e-f001-4543-b69a-ef9b97899364","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13db69e-f001-4543-b69a-ef9b97899364","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"064a1341-749f-474b-815d-3bda68956b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"064a1341-749f-474b-815d-3bda68956b0b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"064a1341-749f-474b-815d-3bda68956b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336529,"nanos":381312427},"http":{"id":"064a1341-749f-474b-815d-3bda68956b0b","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"064a1341-749f-474b-815d-3bda68956b0b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"064a1341-749f-474b-815d-3bda68956b0b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/auth-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"064a1341-749f-474b-815d-3bda68956b0b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"064a1341-749f-474b-815d-3bda68956b0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"064a1341-749f-474b-815d-3bda68956b0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49198","PortSpecifier":{"PortValue":49198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2f2e669-5a24-40fd-909c-eb17beab583b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49198","PortSpecifier":{"PortValue":49198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336529,"nanos":426494620},"http":{"id":"b2f2e669-5a24-40fd-909c-eb17beab583b","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WVq8dFl6FEB20fRc_nF0ftlO5Ve2xJuPswnxpPcNR0P3I2BCqAnFQ8sF4soK"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WVq8dFl6FEB20fRc_nF0ftlO5Ve2xJuPswnxpPcNR0P3I2BCqAnFQ8sF4soK\"}"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad0d4339-0c2e-4f60-abd7-468fb676e570","keyName":"e2e-auth-iso-a-7c9c49","subscription":"e2e-auth-iso-b832b4","tenant":"e2e-shared-a-61bc0a","userId":"ad0d4339-0c2e-4f60-abd7-468fb676e570","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/auth-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b832b4"}
{"level":"info","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:48:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2f2e669-5a24-40fd-909c-eb17beab583b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6843200f8f908fa16f988a7e8436522ffca6bd7afe59b5140f5a4e8160e67b42"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd15b6ff810fbaf3400e28753834c7f6372d4285ba90e55298e31ccbea98e594"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad68ba36978cd0add3761bf18a523fd9dee000c7b4f32088c4e6f7b0c6d2532a"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9de668b85cdec9380962d3bec8c4cc53efc7f1009125e2ce55520b701b6b93"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10d6cf24e899565c89589f0210f7f1b9b846bebac64f8ee6d38526190853557e"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2641ea92f2f1afa963400c488ed2b178fe120868c7a3e04f04ffb73c3f70bc9"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ef4ac7cd0699d238418c1b861c8e9dd798dc7d2ebd147b08612b582a55c9a33"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/089c5aef44d9d65a9dab1a933b31eb9077d423d76d9658be020a700acc90f979"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0049c085a59700832e56a3d58c0fe8d3275967a99553df852c50ad64dc58dacf"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfbde527047e2da1ebd8362199b90fae80e5505244944696d0a720e2290981ed"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49848476477ffc05e8de1ac94534e420fe1150cfba85f479af756b48aba92f3"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd2e1ee3630bffab9fc8d600de7771a8e6088db18d4cc5392b57b8d61004812"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3da214fffe17f84e40fd7ed9a6314282419bcece9b734c63b7edd88039bbd65f"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eacfd3d8e5f2b959c23cb84d1c7d81aba240a0abb19eb267486e7b353ddf59f"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f74da05eb2bcdc7e2c0bb7c6b3141a48fb5dfa133e5aad657a0e53acffc54c84"}
{"level":"info","ts":"2026-07-29T14:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd25f6f789949eba194f54846f13edb2eb7accd81f37e18449d0ba9d7ea409f3"}
{"level":"debug","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06"}
{"level":"debug","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06"}
{"level":"debug","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"error","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"error","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41"}
{"level":"info","ts":"2026-07-29T14:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"error","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50184","PortSpecifier":{"PortValue":50184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60a6131b-8143-4061-b287-fbdbbc08112d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50184","PortSpecifier":{"PortValue":50184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336614,"nanos":230425849},"http":{"id":"60a6131b-8143-4061-b287-fbdbbc08112d","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/sub-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a6131b-8143-4061-b287-fbdbbc08112d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5064de4d-662d-496c-b5bc-59754f0480b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336614,"nanos":290014320},"http":{"id":"5064de4d-662d-496c-b5bc-59754f0480b9","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/sub-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5064de4d-662d-496c-b5bc-59754f0480b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50190","PortSpecifier":{"PortValue":50190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50190","PortSpecifier":{"PortValue":50190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336614,"nanos":339201716},"http":{"id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","method":"GET","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bClY0vhkDGbM38dF_qr5gi1CN9R5pP2nptkDLfL4DwnmHveeLa5m1e6N2zZ1"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bClY0vhkDGbM38dF_qr5gi1CN9R5pP2nptkDLfL4DwnmHveeLa5m1e6N2zZ1\"}"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb83423b-c849-4606-be1d-ec414f3a1bf7","keyName":"e2e-sub-iso-298140","subscription":"e2e-a-only-79f63a","tenant":"e2e-shared-a-61bc0a","userId":"bb83423b-c849-4606-be1d-ec414f3a1bf7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/sub-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-79f63a"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d8cf95-a197-4e0f-be85-8cd2772e82a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59700","PortSpecifier":{"PortValue":59700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31b9aad8-5119-4398-85fd-809243eb3ffb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59700","PortSpecifier":{"PortValue":59700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336614,"nanos":382871204},"http":{"id":"31b9aad8-5119-4398-85fd-809243eb3ffb","method":"GET","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DQk1RBk5846Knpot_jypXaaGsBHPS3jGKQFfbs1iDAiLNeRQLh08EIo4JtBz"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DQk1RBk5846Knpot_jypXaaGsBHPS3jGKQFfbs1iDAiLNeRQLh08EIo4JtBz\"}"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f50d18e-1dde-4862-9d32-dc4eb5239191","keyName":"e2e-sub-iso-435774","subscription":"e2e-b-only-79f63a","tenant":"e2e-shared-b-532c20","userId":"8f50d18e-1dde-4862-9d32-dc4eb5239191","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/sub-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-79f63a"}
{"level":"info","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b9aad8-5119-4398-85fd-809243eb3ffb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53542","PortSpecifier":{"PortValue":53542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2c09528-06d7-4282-80a8-f13b4a729929","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53542","PortSpecifier":{"PortValue":53542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336636,"nanos":183074319},"http":{"id":"f2c09528-06d7-4282-80a8-f13b4a729929","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/sub-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2c09528-06d7-4282-80a8-f13b4a729929","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37930","PortSpecifier":{"PortValue":37930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37930","PortSpecifier":{"PortValue":37930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336636,"nanos":236323616},"http":{"id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/sub-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7df73f8-4a6f-4ec0-85d7-1526d63b0e36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336636,"nanos":271183899},"http":{"id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hIpl4hsu2NHIE123_yOD296jR29Cj7H7a3FBcp3xx7AisJU6uQrC1XLPH8PZ"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hIpl4hsu2NHIE123_yOD296jR29Cj7H7a3FBcp3xx7AisJU6uQrC1XLPH8PZ\"}"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2a1e514-af52-454a-ad58-b53e58f1234f","keyName":"e2e-sub-iso-469306","subscription":"e2e-shared-sub-eaa1a0","tenant":"e2e-shared-a-61bc0a","userId":"a2a1e514-af52-454a-ad58-b53e58f1234f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/sub-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-eaa1a0"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd3363a-7df4-4894-b6d5-ca17e7a914a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37940","PortSpecifier":{"PortValue":37940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a285a69a-18e7-481a-b66b-f947a7712b6e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:37940","PortSpecifier":{"PortValue":37940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336636,"nanos":304338783},"http":{"id":"a285a69a-18e7-481a-b66b-f947a7712b6e","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UdRjS5XRt13udvwQ_TVIeqLS5iF9SFO5d2jkbWSCdXc8vQRN1nc9yvCKhdlx"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UdRjS5XRt13udvwQ_TVIeqLS5iF9SFO5d2jkbWSCdXc8vQRN1nc9yvCKhdlx\"}"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd7a1882-aebb-4742-b85a-1e01c3943f73","keyName":"e2e-sub-iso-0f1776","subscription":"e2e-shared-sub-eaa1a0","tenant":"e2e-shared-b-532c20","userId":"dd7a1882-aebb-4742-b85a-1e01c3943f73","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/sub-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-eaa1a0"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a285a69a-18e7-481a-b66b-f947a7712b6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:50:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aff947af2d0f47444609478737bb292c2c0390275cad92c78b49850a9461d808"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3935df2051b6fca9ed64e671d3030161623edf711d9e4f3964279a4db5d5e8c"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00717bf33974dbef663916ad5d2713d3cd7553fbe2ae16203f6fadfeef56c8d7"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b0fcd1210cbaf8d960f67fabc543c9aebadee6f86bbd5663316ef5d82869c1"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/030cf408c6b416914dd78786c7080f18d21a72dc3c996d9bfe85ac010852f269"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2504dab91f7200de5a38367e2c35b1b643409aaf2cd3c43c8a1dd8f982be7f2"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12c409c74b50e1b91a0310fbb1dd1de17ce12d48240e68b8efaf0b278ce8a524"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3e811eeb62856f3f93617d08cbb69d0badb72acb645e724ede62d13c6ae1f84"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1da38cfd5defa4b1b6648f929459b435e3b6778572f1406bd893bdc683ceb4"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d60de89d67b97223d51440dfc877d79df5f277ac8ca52149fefb05311e3fab"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be26a4970f1c01fcff3082964dd3a44bcbe1b443ab98b0800919c2630fb22f1"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/711ed9a6280307cc08bba60618f6b72bd997356935a20f946e88f2aaa448ee06"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8777f1e59ad5230b1a9da0d837673c471db72749a2bd79f97d149467ad9cb52"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b532347c7091f9ada473cd3dfe858c8af5d542d645a754403a180e10fa86485"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e2dae5eae21ea4c87e1fd570da351c6cb8ae0edf90cc3032515932e9eb0b41"}
{"level":"info","ts":"2026-07-29T14:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c2b84f6b8ed13b0f34c12cb7a005452862c1e3c60f7f3df849d6d67658db24"}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"error","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c"}
{"level":"error","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c"}
{"level":"error","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd"}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9"}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:51:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b"}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49498","PortSpecifier":{"PortValue":49498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6855075d-253e-4bd1-81cf-f361cae596cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49498","PortSpecifier":{"PortValue":49498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336720,"nanos":772279158},"http":{"id":"6855075d-253e-4bd1-81cf-f361cae596cc","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6855075d-253e-4bd1-81cf-f361cae596cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58328","PortSpecifier":{"PortValue":58328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58328","PortSpecifier":{"PortValue":58328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336720,"nanos":816504302},"http":{"id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0262b96-ab1b-4994-b552-e3f181dd83aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336720,"nanos":857829590},"http":{"id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu\"}"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","subscription":"e2e-rate-iso-a-03b1c2","tenant":"e2e-shared-a-61bc0a","userId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-03b1c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03b1c2"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","selected_subscription":"e2e-rate-iso-a-03b1c2","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-03b1c2@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e38cbc-2a4e-4884-a4b5-df09735fea6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87440a48-60ae-45dd-8531-e20b71d54963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49518","PortSpecifier":{"PortValue":49518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87440a48-60ae-45dd-8531-e20b71d54963","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87440a48-60ae-45dd-8531-e20b71d54963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49518","PortSpecifier":{"PortValue":49518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336721,"nanos":953677448},"http":{"id":"87440a48-60ae-45dd-8531-e20b71d54963","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu\"}"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","subscription":"e2e-rate-iso-a-03b1c2","tenant":"e2e-shared-a-61bc0a","userId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-03b1c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87440a48-60ae-45dd-8531-e20b71d54963","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03b1c2"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87440a48-60ae-45dd-8531-e20b71d54963","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","selected_subscription":"e2e-rate-iso-a-03b1c2","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-03b1c2@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87440a48-60ae-45dd-8531-e20b71d54963","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87440a48-60ae-45dd-8531-e20b71d54963","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49534","PortSpecifier":{"PortValue":49534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49534","PortSpecifier":{"PortValue":49534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336722,"nanos":996893090},"http":{"id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CM6X6PWOe673Rtho_DuUosh4BYsjumPRIjUAq2KyMCZg25H4bx9bgEF4K5hu\"}"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","subscription":"e2e-rate-iso-a-03b1c2","tenant":"e2e-shared-a-61bc0a","userId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-03b1c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03b1c2"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"84c89e4a-3510-4531-b959-a9cfd9f3f41f","keyName":"e2e-rate-a-03b1c2","selected_subscription":"e2e-rate-iso-a-03b1c2","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-03b1c2@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03b1c2","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ba81f75-db6e-4e97-9380-c3518b6a1a62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"error","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"debug","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"error","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:52:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56362","PortSpecifier":{"PortValue":56362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"127071d5-53c7-423c-a36c-b72094a6a2dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56362","PortSpecifier":{"PortValue":56362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336759,"nanos":884716208},"http":{"id":"127071d5-53c7-423c-a36c-b72094a6a2dc","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127071d5-53c7-423c-a36c-b72094a6a2dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336759,"nanos":927258805},"http":{"id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b1fdbd-53c8-4968-a8f4-ad5b054f0760","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56370","PortSpecifier":{"PortValue":56370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56370","PortSpecifier":{"PortValue":56370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336759,"nanos":964875215},"http":{"id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7\"}"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","subscription":"e2e-rate-iso-a-8e2c20","tenant":"e2e-shared-a-61bc0a","userId":"dadd24b3-549a-4815-bc47-2babb61df1ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-8e2c20\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e2c20"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","selected_subscription":"e2e-rate-iso-a-8e2c20","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-8e2c20@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4904bfe-2fa7-4ea8-99d1-a5bd35c9d25f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56374","PortSpecifier":{"PortValue":56374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"998f9a19-4f9d-49e3-818e-db393cf68f50","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56374","PortSpecifier":{"PortValue":56374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336761,"nanos":11010383},"http":{"id":"998f9a19-4f9d-49e3-818e-db393cf68f50","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7\"}"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","subscription":"e2e-rate-iso-a-8e2c20","tenant":"e2e-shared-a-61bc0a","userId":"dadd24b3-549a-4815-bc47-2babb61df1ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-8e2c20\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e2c20"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","selected_subscription":"e2e-rate-iso-a-8e2c20","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-8e2c20@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"998f9a19-4f9d-49e3-818e-db393cf68f50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56378","PortSpecifier":{"PortValue":56378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","method":"POST","path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions","host":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56378","PortSpecifier":{"PortValue":56378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336762,"nanos":54620796},"http":{"id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","method":"POST","headers":{":authority":"e2e-shared-a-61bc0a.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHKhF5hLgheOEEuL_yWNODUCkzodooFpFSr0tzoWA2YTo6FwAaM2cIfKVNj7\"}"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","subscription":"e2e-rate-iso-a-8e2c20","tenant":"e2e-shared-a-61bc0a","userId":"dadd24b3-549a-4815-bc47-2babb61df1ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\",\"requestedSubscription\":\"e2e-rate-iso-a-8e2c20\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-61bc0a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e2c20"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dadd24b3-549a-4815-bc47-2babb61df1ff","keyName":"e2e-rate-a-8e2c20","selected_subscription":"e2e-rate-iso-a-8e2c20","selected_subscription_key":"ai-tenant-e2e-shared-a-61bc0a/e2e-rate-iso-a-8e2c20@ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-61bc0a/models/facebook/opt-125m","name":"rate-test-model-61bc0a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e2c20","namespace":"ai-tenant-e2e-shared-a-61bc0a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-61bc0a/rate-test-model-61bc0a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b532ac0a-a87c-4b63-b2bd-b5df4432582c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39298","PortSpecifier":{"PortValue":39298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca8502f-5c59-4c36-a174-8b1b61921792","method":"POST","path":"/ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20/v1/completions","host":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:39298","PortSpecifier":{"PortValue":39298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336762,"nanos":95816918},"http":{"id":"8ca8502f-5c59-4c36-a174-8b1b61921792","method":"POST","headers":{":authority":"e2e-shared-b-532c20.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tud6kpc1vIrlM0qG_qksAOcpwWhLBHepmSu9s5OVMIh0RettPsRBL4qb3JpB"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tud6kpc1vIrlM0qG_qksAOcpwWhLBHepmSu9s5OVMIh0RettPsRBL4qb3JpB\"}"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f20995f-800b-4296-99dd-0fac58f2c39e","keyName":"e2e-rate-b-8e2c20","subscription":"e2e-rate-iso-b-8e2c20","tenant":"e2e-shared-b-532c20","userId":"6f20995f-800b-4296-99dd-0fac58f2c39e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20\",\"requestedSubscription\":\"e2e-rate-iso-b-8e2c20\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-532c20.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m","name":"rate-test-model-532c20","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8e2c20","namespace":"ai-tenant-e2e-shared-b-532c20","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20"}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8e2c20"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f20995f-800b-4296-99dd-0fac58f2c39e","keyName":"e2e-rate-b-8e2c20","selected_subscription":"e2e-rate-iso-b-8e2c20","selected_subscription_key":"ai-tenant-e2e-shared-b-532c20/e2e-rate-iso-b-8e2c20@ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-532c20/models/facebook/opt-125m","name":"rate-test-model-532c20","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8e2c20","namespace":"ai-tenant-e2e-shared-b-532c20","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-532c20/rate-test-model-532c20"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca8502f-5c59-4c36-a174-8b1b61921792","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/356380d6dc65a44087f2b69316581e8a8f5827e62175b48165878d8441d790b1"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05fba65b62bb2a249875568516ad7105070a5bb7bc627beb3c273c1feadeee26"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846d110418da08d511ff2cd198fa0fff548cc20924c49064f86d7eef18f8d21a"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ece6b1bf33f0ebae0cf2145e51637cf2f1bbbbd0a0baf6d56f4ef750efabdd7"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e65b045423d2e6995119b6c5b112b5b1e264494273e142057f07c990f6f5124b"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abe9e36b8f00162ebd7aaf918e4e888059786cb5a41075db9b6ed0df8bc3f442"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb442116f48aa99afa91a1d6a06d8131f93ac4a05ec59bcfe234a2e69a7d2327"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b016d5529080e4cee509de0225309d2789722bd0ea26e198c5f90e8c548940b0"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3672c5c5bafcfed8bcd2597f3a272a79ee78ad63bd2681c878c0adb694eeca5a"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c54cb37fc2752a7d8a9d512b0390ce0096b40ea66bd99cc3925a3e48587679"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b029969e24cf3045798eb1c9617b9b1fd552737df5567ea34f8e26816306f44e"}
{"level":"info","ts":"2026-07-29T14:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f19cb492574d4334915459e427f7d7d2bacfc5c09fa6f7faad08e0a5db018f7c"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9d6c2e4be6c79030800350b5c1175876e808ab25285e3ad322d900ed6e016a"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4a6d7371de50a011a35302592c2fc3a16ce66dc568827711cb6e22332268ab"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d248f30ed8ccc9c020bbb82c227f7325c48429a6f6f9f0246a15468f692f3d"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1a1564de5220599a70104de31e781f6f82f3f83096114cdcb0e4c540e0ebecd"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aa5d2240e09803677227bbaf8e507bdbd5744216981989ff8b392b9ce008f87"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a00051c534a57a56b84bd3a57ac65023d3ae4b464c57d005f8b67a68deca88c"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beeabea31eab8e5e166d0ec628f35af274ea2af3d573588466f88f46be676da6"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfdf7b1df8e847684539970d088d78fdc5a5b5e0a13ab2a55192b9188677dea9"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5292a9fdc8660c9c15bde70c01c849ae172a23d57dcf885ca02d5a1d79a0e6b"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe0cc8ec414d2208624d43a6cc81e29fbb1961429981ee37ebcb26ad546ca086"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19f070c3c34199f680b221766fb2c89c83cbaea37cc18527c774be9aa1c42d50"}
{"level":"info","ts":"2026-07-29T14:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39c2bf836f4af5fda89594d780f95800ff4b7a732205961af2e09a37fd4cc77b"}
{"level":"info","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38386","PortSpecifier":{"PortValue":38386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f960138b-dc06-45ae-a602-6056c6a3a57d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38386","PortSpecifier":{"PortValue":38386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336846,"nanos":738033397},"http":{"id":"f960138b-dc06-45ae-a602-6056c6a3a57d","method":"POST","headers":{":authority":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f960138b-dc06-45ae-a602-6056c6a3a57d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336846,"nanos":791161582},"http":{"id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","method":"POST","headers":{":authority":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8syZrM1iIBq34Sxo_Ss4CzerwvelbijOFgfLOHMxNy3x6GdqWjiDT1AjfbFE"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8syZrM1iIBq34Sxo_Ss4CzerwvelbijOFgfLOHMxNy3x6GdqWjiDT1AjfbFE\"}"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8dce19b8-3662-4322-985c-dcad80347ab0","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"8dce19b8-3662-4322-985c-dcad80347ab0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8dce19b8-3662-4322-985c-dcad80347ab0","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c4cf23-c5bb-4d15-9433-c14d688a44e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"error","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40"}
{"level":"error","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804"}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"debug","ts":"2026-07-29T14:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T14:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T14:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T14:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T14:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"info","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38836","PortSpecifier":{"PortValue":38836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-19afc1.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38836","PortSpecifier":{"PortValue":38836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336889,"nanos":662045888},"http":{"id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","method":"POST","headers":{":authority":"e2e-ipp-a-19afc1.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"]}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60a6f0de8c03"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59f77289-e76a-41c4-b73e-2b5c03231dfc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fe4ac589-8c81-427d-af1a-c3841f48dc5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-19afc1.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-19afc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40bd51c4-e855-4ffd-a11d-2e812f5379d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38852","PortSpecifier":{"PortValue":38852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","method":"POST","path":"/ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1/v1/chat/completions","host":"e2e-ipp-a-19afc1.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38852","PortSpecifier":{"PortValue":38852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785336891,"nanos":730751438},"http":{"id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","method":"POST","headers":{":authority":"e2e-ipp-a-19afc1.apps.5c669420-7350-4ec5-a8f2-60a6f0de8c03.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13cmd3oVeX0p8bC4F_nL0hqtrVga025IGxsBdqkUa3jpWTAD0tb2NzMrmgZFn"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-19afc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13cmd3oVeX0p8bC4F_nL0hqtrVga025IGxsBdqkUa3jpWTAD0tb2NzMrmgZFn\"}"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-19afc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38c1107a-bf48-4607-a6dd-780f8ca117e0","keyName":"e2e-ipp-19afc1","subscription":"ipp-route-19afc1-sub","tenant":"e2e-ipp-a-19afc1","userId":"38c1107a-bf48-4607-a6dd-780f8ca117e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-19afc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1\",\"requestedSubscription\":\"ipp-route-19afc1-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-19afc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-19afc1/models/facebook/opt-125m","name":"ipp-route-19afc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-19afc1-sub","namespace":"ai-tenant-e2e-ipp-a-19afc1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1"}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-19afc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-19afc1-sub"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"38c1107a-bf48-4607-a6dd-780f8ca117e0","keyName":"e2e-ipp-19afc1","selected_subscription":"ipp-route-19afc1-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1-sub@ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-19afc1/models/facebook/opt-125m","name":"ipp-route-19afc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-19afc1-sub","namespace":"ai-tenant-e2e-ipp-a-19afc1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-19afc1/ipp-route-19afc1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T14:54:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a3b3bc-be8f-41e9-bde0-f645e40aebc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226fbfbafbe6bec7abd1951732216fed011cc03b05210336fb038dd44162242f"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaca341127b24d48b0ae781ce5d4014a103fc0f592353729b61e62ec2db911f4"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74dfb684782bbb92a41bd77ebe2cba2612dfcb6fd8adb396ccf341d35ae1551c"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b04d6d834afc4edd1f550a0a7ae16aa9525ef22d349a9885faa2d24364ab126"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74b9891643d0364f16a47f9d39124ca1d628c6f54b4f448ea571bdbaeb9ccc3d"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b67eef569aadc7ceb018605e27263bf97e747b0ae57ef9515df221d22e54cac"}
{"level":"info","ts":"2026-07-29T14:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fc2c641df65972db1a4230cf3d08079cb096c8e72437d318d0085567c32d804"}
{"level":"info","ts":"2026-07-29T14:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ab6bf2bda17712bbe53548f9271287d44c5c133eb0694d68bd90bd4da8a5a40"}
{"level":"info","ts":"2026-07-29T14:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c6fd1e52895237f0f3e69afd8c4bcef23f79b5fc73254e591ac13e0f80ee3df"}
{"level":"info","ts":"2026-07-29T14:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f5162f105e81aec997fe1367bf8cc3e5f3171792c876de5b98cdeded904fb1f"}
{"level":"info","ts":"2026-07-29T14:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbec8630afd73bbcb10299a018ffbd97af8f0aeefa9f6033272f307d8df36ba0"}
{"level":"info","ts":"2026-07-29T14:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86f1aca9114f4f813060214f6ef81b77c2a1c5a750510a8cd80a140060b1c38"}