--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5d2181e8618aa2f517be5695ccf5ac87440defb289a9de47cb5fff9c50ec30"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"error","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"error","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"error","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7"}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46252","PortSpecifier":{"PortValue":46252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46252","PortSpecifier":{"PortValue":46252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625810,"nanos":488017137},"http":{"id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"297ec322-6203-4e25-a0c1-f4d167aa2d62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55082","PortSpecifier":{"PortValue":55082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1704a266-3506-41ea-9beb-6585d3a37c4c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55082","PortSpecifier":{"PortValue":55082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625810,"nanos":546580365},"http":{"id":"1704a266-3506-41ea-9beb-6585d3a37c4c","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1704a266-3506-41ea-9beb-6585d3a37c4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46260","PortSpecifier":{"PortValue":46260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","method":"GET","path":"/maas-api/v1/api-keys/262d04f7-f63b-4afa-9776-6b82840080e2","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46260","PortSpecifier":{"PortValue":46260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625810,"nanos":603322085},"http":{"id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","method":"GET","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/262d04f7-f63b-4afa-9776-6b82840080e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/262d04f7-f63b-4afa-9776-6b82840080e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af293cdf-e16c-4d5c-a7eb-7b1bdc8fa342","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","method":"GET","path":"/maas-api/v1/api-keys/2e941a1d-c240-4076-a01d-66c035f2f048","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625810,"nanos":635973283},"http":{"id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","method":"GET","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e941a1d-c240-4076-a01d-66c035f2f048",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e941a1d-c240-4076-a01d-66c035f2f048",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da0c0a39-4ef3-4cfb-8bcb-a378629e964b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48960","PortSpecifier":{"PortValue":48960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48960","PortSpecifier":{"PortValue":48960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625829,"nanos":884602006},"http":{"id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d57dce0-11e7-48e6-b589-a22cda4d0da1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39590","PortSpecifier":{"PortValue":39590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad42f517-c9d5-455d-8328-abc77bcd4137","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39590","PortSpecifier":{"PortValue":39590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625829,"nanos":918358046},"http":{"id":"ad42f517-c9d5-455d-8328-abc77bcd4137","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad42f517-c9d5-455d-8328-abc77bcd4137","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48966","PortSpecifier":{"PortValue":48966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5907ffea-79af-4bad-8b2b-087f4af5e268","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48966","PortSpecifier":{"PortValue":48966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625829,"nanos":957087824},"http":{"id":"5907ffea-79af-4bad-8b2b-087f4af5e268","method":"GET","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11Cu79wP2mvCLgucQ_vYNClRGxkJof7vmxWZ4s7Zp1vJOqiVCHaq2aHIkmPRJ"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11Cu79wP2mvCLgucQ_vYNClRGxkJof7vmxWZ4s7Zp1vJOqiVCHaq2aHIkmPRJ\"}"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ceff772-8ae4-4f37-a818-c0fa40f630f6","keyName":"e2e-auth-iso-a-e9925b","subscription":"e2e-auth-iso-758f82","tenant":"e2e-shared-a-77ffac","userId":"6ceff772-8ae4-4f37-a818-c0fa40f630f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-758f82"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5907ffea-79af-4bad-8b2b-087f4af5e268","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e099cd84-6ae2-4088-a1c4-82701223926e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625847,"nanos":108047064},"http":{"id":"e099cd84-6ae2-4088-a1c4-82701223926e","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e099cd84-6ae2-4088-a1c4-82701223926e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02223968-3496-4e65-8883-e59ab0a251ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44154","PortSpecifier":{"PortValue":44154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02223968-3496-4e65-8883-e59ab0a251ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02223968-3496-4e65-8883-e59ab0a251ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44154","PortSpecifier":{"PortValue":44154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625847,"nanos":142488870},"http":{"id":"02223968-3496-4e65-8883-e59ab0a251ab","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02223968-3496-4e65-8883-e59ab0a251ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02223968-3496-4e65-8883-e59ab0a251ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02223968-3496-4e65-8883-e59ab0a251ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02223968-3496-4e65-8883-e59ab0a251ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02223968-3496-4e65-8883-e59ab0a251ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44156","PortSpecifier":{"PortValue":44156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44156","PortSpecifier":{"PortValue":44156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625847,"nanos":174577660},"http":{"id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","method":"GET","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U1Basu62VBZJS9gF_EDcrHk76j2kcDNOoLLzgK8reRGMZBK6T9uJaklCH65p"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U1Basu62VBZJS9gF_EDcrHk76j2kcDNOoLLzgK8reRGMZBK6T9uJaklCH65p\"}"}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T19:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32eb2f2-3bc5-4fe5-b5f3-61d7cc04eb58","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49830","PortSpecifier":{"PortValue":49830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e495ec0f-c2b0-4585-8820-6a491b88e564","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49830","PortSpecifier":{"PortValue":49830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625866,"nanos":416620071},"http":{"id":"e495ec0f-c2b0-4585-8820-6a491b88e564","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e495ec0f-c2b0-4585-8820-6a491b88e564","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39464","PortSpecifier":{"PortValue":39464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39464","PortSpecifier":{"PortValue":39464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625866,"nanos":457090347},"http":{"id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced5fc8c-f123-4eea-91fa-ccdb8e6a1cad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49838","PortSpecifier":{"PortValue":49838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49838","PortSpecifier":{"PortValue":49838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625866,"nanos":495452368},"http":{"id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef07331-86c4-44cc-b1d6-f9e2ce7444fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625866,"nanos":529046559},"http":{"id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f042e40a-9d8a-465a-9e13-1168b6ea844a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55658","PortSpecifier":{"PortValue":55658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55658","PortSpecifier":{"PortValue":55658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625883,"nanos":734212440},"http":{"id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d965ae98-8af1-4188-bfc0-bdce5d837a77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"773870a7-4ddf-4960-82c9-ac22807a8956","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625883,"nanos":770212727},"http":{"id":"773870a7-4ddf-4960-82c9-ac22807a8956","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773870a7-4ddf-4960-82c9-ac22807a8956","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40944","PortSpecifier":{"PortValue":40944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","method":"GET","path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40944","PortSpecifier":{"PortValue":40944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625883,"nanos":803783978},"http":{"id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","method":"GET","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6a1cf28-b247-4bc8-a7f0-3d82399b321e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55674","PortSpecifier":{"PortValue":55674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","method":"GET","path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55674","PortSpecifier":{"PortValue":55674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625883,"nanos":833704955},"http":{"id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","method":"GET","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5837a0db-d267-43d8-88e2-c7197851b06f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e37d17-233e-41e8-ac5a-6eadc0d7fd15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57682","PortSpecifier":{"PortValue":57682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57682","PortSpecifier":{"PortValue":57682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625900,"nanos":985527422},"http":{"id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378767f9-9294-4edb-afeb-5e6b9a344fb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59642","PortSpecifier":{"PortValue":59642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59642","PortSpecifier":{"PortValue":59642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625901,"nanos":16643929},"http":{"id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/auth-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7140c47-82e1-4d0f-a142-ea1fe40128a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57684","PortSpecifier":{"PortValue":57684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2db08408-52fc-4da4-92fd-f0f71f85c321","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57684","PortSpecifier":{"PortValue":57684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625901,"nanos":51583221},"http":{"id":"2db08408-52fc-4da4-92fd-f0f71f85c321","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DCvQBlCyDqWMmVkz_bjxHunXWIOuH4WwQzMDnf1uDFDHL4TxFi6ErztE4z0v"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DCvQBlCyDqWMmVkz_bjxHunXWIOuH4WwQzMDnf1uDFDHL4TxFi6ErztE4z0v\"}"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a0d6dab-001f-4079-a637-3036b575838c","keyName":"e2e-auth-iso-a-e28ff5","subscription":"e2e-auth-iso-4ae162","tenant":"e2e-shared-a-77ffac","userId":"1a0d6dab-001f-4079-a637-3036b575838c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/auth-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4ae162"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db08408-52fc-4da4-92fd-f0f71f85c321","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a52ad19b8242debd46a4101a020cada2ce76f871e14e9d6690996354dae2e300"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a5d2181e8618aa2f517be5695ccf5ac87440defb289a9de47cb5fff9c50ec30"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b44389fe47363db3afdce8ac0814c7ed0ea7f9fcb4b9e68744cecdeadd878c6"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bc58715370abbcfa71bbe39bc6f3eca2fab50e0c34d054b1b602bdb07de1912"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50d21e43a0d560f761f621ee41894b3ae55a5606299dec51a313da324502a2cd"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9648e99ecb15b8182c5e0c79c705ff3118eb9805c21e2eee665905190241abd7"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b17fe1087c92f8618dbf01fd5c43b905ee9f79bc9fd409e921e4c0619059b1c2"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a5494f7977dd5d0b22b72e26e3ba58515b33b3f625c9863a0def7161faa71f"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce65d3153bf1a881e04e5b7bdcc1b0150c3f97616bf120e1d9f6d1a48d075b18"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65f0bafb22ddd5c86d763e5320dc2d85e0a842a38bada0d31461023fd3f77f83"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d24854e20a4fdb1a4266ffceb3508edc067028333f84f78c3f123d0ae40932a"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5836c59b8fb44edb78a01b246ec4095f0b86497796fdb3b4d4c141a4a061f47"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac9624e2798d5d584176cb1821b88687b712ccf54bde3f22f38d88ba9a732ed"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8603b6ccc9ca9b2a638d865357d888b7e30d43f5e8afe12606125b3cab61a4c5"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef8aa52c8536d13f530863e3c7f2273d239b52dc1f5685420f8e020a67909c3c"}
{"level":"info","ts":"2026-07-09T19:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52201cc0c8be1814b6201ce5774c43012e225434cecf460ed340a3bc7217ddb0"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"error","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:38:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"error","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"debug","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37198","PortSpecifier":{"PortValue":37198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37198","PortSpecifier":{"PortValue":37198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625963,"nanos":705055259},"http":{"id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/sub-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1afc21d-45a3-4ff7-a00b-7adff075ebb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41236","PortSpecifier":{"PortValue":41236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625963,"nanos":746335037},"http":{"id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/sub-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b87f90-f0dc-43e4-96d8-3d6a0d9de4f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37200","PortSpecifier":{"PortValue":37200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37200","PortSpecifier":{"PortValue":37200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625963,"nanos":783368262},"http":{"id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","method":"GET","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JvbAxMpkZhLrHCzJ_X5qGQVamMlLO7y6GhK2i8X1GnN6aRZWK7kRvUDB05fV"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JvbAxMpkZhLrHCzJ_X5qGQVamMlLO7y6GhK2i8X1GnN6aRZWK7kRvUDB05fV\"}"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24d9bc38-d5a6-4981-8005-cfdf535ffdb5","keyName":"e2e-sub-iso-4c533d","subscription":"e2e-a-only-007ac1","tenant":"e2e-shared-a-77ffac","userId":"24d9bc38-d5a6-4981-8005-cfdf535ffdb5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/sub-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-007ac1"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29595bfa-9944-4f6c-8ab6-e5f18070f570","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41244","PortSpecifier":{"PortValue":41244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41244","PortSpecifier":{"PortValue":41244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625963,"nanos":820647781},"http":{"id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","method":"GET","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eUBrbPj6tNnHH1Ow_JZMUmN6ZuXBi6AMRVG3VWACYvsd5dX5iSgXhrMgHORd"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eUBrbPj6tNnHH1Ow_JZMUmN6ZuXBi6AMRVG3VWACYvsd5dX5iSgXhrMgHORd\"}"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2aea1d6-d21d-4f6d-a661-10a04d7b8e89","keyName":"e2e-sub-iso-3791ae","subscription":"e2e-b-only-007ac1","tenant":"e2e-shared-b-11fb58","userId":"e2aea1d6-d21d-4f6d-a661-10a04d7b8e89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/sub-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-007ac1"}
{"level":"info","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327441c9-bdcc-4810-a4eb-fe9e6c994629","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56668","PortSpecifier":{"PortValue":56668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56668","PortSpecifier":{"PortValue":56668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625982,"nanos":318094889},"http":{"id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/sub-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513ab2f7-3ff4-4744-b0f9-6f651ae1c75a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45298","PortSpecifier":{"PortValue":45298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45298","PortSpecifier":{"PortValue":45298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625982,"nanos":353594260},"http":{"id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/sub-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848de093-c9b7-4e48-94e0-d283c7b9aedc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59019a53-6801-417e-ae7b-37e55af1c848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59019a53-6801-417e-ae7b-37e55af1c848","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59019a53-6801-417e-ae7b-37e55af1c848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625982,"nanos":391593984},"http":{"id":"59019a53-6801-417e-ae7b-37e55af1c848","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TXLIEJOd9jYjjJgm_eufsD0MS1cse8mi9UmurYtgdGzvpeqHFyhv4Xl4GHTQ"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TXLIEJOd9jYjjJgm_eufsD0MS1cse8mi9UmurYtgdGzvpeqHFyhv4Xl4GHTQ\"}"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca48f97d-8536-4f11-af4e-6d72629a47ca","keyName":"e2e-sub-iso-c8da40","subscription":"e2e-shared-sub-42361b","tenant":"e2e-shared-a-77ffac","userId":"ca48f97d-8536-4f11-af4e-6d72629a47ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59019a53-6801-417e-ae7b-37e55af1c848","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/sub-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59019a53-6801-417e-ae7b-37e55af1c848","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-42361b"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59019a53-6801-417e-ae7b-37e55af1c848","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59019a53-6801-417e-ae7b-37e55af1c848","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45302","PortSpecifier":{"PortValue":45302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45302","PortSpecifier":{"PortValue":45302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625982,"nanos":419795823},"http":{"id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iBpjEfCfxTunosuu_QchGlKR3groXQXpT3l5yADiBZZBXeNRfpHWodT1fadS"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iBpjEfCfxTunosuu_QchGlKR3groXQXpT3l5yADiBZZBXeNRfpHWodT1fadS\"}"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0b2a0f5-872a-4187-a1f1-6796fd23ae53","keyName":"e2e-sub-iso-cd9429","subscription":"e2e-shared-sub-42361b","tenant":"e2e-shared-b-11fb58","userId":"e0b2a0f5-872a-4187-a1f1-6796fd23ae53","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/sub-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-42361b"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6645f3fd-eae3-455d-a354-3cadc0c06ee4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/944d33d2ae87bc252bbd439409bbd8898a01a9ad25bf23e9a5844e66370ce9b7"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b0a0386c521c0a3d20fbaca42b0ebe5595b19f27f46619c966efe2ebe9d049"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/112bad8af283782d98c7ebbb8fee284307870893fc93736a8215c724dcfb99d3"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/023ed83ca19feb718fa94bb1483fcf43d346d1a226485b3074cbc467a0221681"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac7b782fe3b47dda636055957ec366f95d55045b98df92cda3f16f0be7b5895"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c416740027d345fdb813bb6919116ec45829917ef60460ac6723d947268644e8"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3f6339a3a80d0380301446be98b85155989a3913bf26eb2b4072e6bbf90a819"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd09d97fb750711c33a4a51b77e732b03a6ce475db0e77a83c0533e27a7a3f21"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec638d57a92dba20f69cf7dfec2251220256f29610b65867abdf1cb14a855c0d"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f94d215f7f882a4878d321a61d3bb20db765c808c5da8221955db55fce02202e"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fd55e6a9385cf332088f10231da829029f081d3c9bea009374fa22714f2405b"}
{"level":"info","ts":"2026-07-09T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ade968dc8139430253c6dd03c0c0fafa15bc7162a57e52bc68f9ca7b4a9cd120"}
{"level":"info","ts":"2026-07-09T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e24b477c48e8501a41ee499f9608bb74fb84af78b5ef666825d5bb7ea68f14"}
{"level":"info","ts":"2026-07-09T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0a10a534d9a9fac803b17664a99b170271cf6540e25cee14cd4413bd04f98ed"}
{"level":"info","ts":"2026-07-09T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cc48ef7261724e2dc823030a69320088a4ff2c19e8077b1bf6ed5f9d17f8c54"}
{"level":"info","ts":"2026-07-09T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7280231b542548240f1ef509cc400342a3e9f6a1c2adbb8ac4add73b27f9650f"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470"}
{"level":"info","ts":"2026-07-09T19:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774"}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774"}
{"level":"info","ts":"2026-07-09T19:40:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"error","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce"}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"debug","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"info","ts":"2026-07-09T19:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"error","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"error","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"debug","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c"}
{"level":"info","ts":"2026-07-09T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"}
{"level":"info","ts":"2026-07-09T19:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51046","PortSpecifier":{"PortValue":51046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"501e921a-deac-4f0f-a867-7ee22a944de5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51046","PortSpecifier":{"PortValue":51046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626066,"nanos":613309830},"http":{"id":"501e921a-deac-4f0f-a867-7ee22a944de5","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501e921a-deac-4f0f-a867-7ee22a944de5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58710","PortSpecifier":{"PortValue":58710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58710","PortSpecifier":{"PortValue":58710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626066,"nanos":653672685},"http":{"id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"588bf6a1-8792-4707-b6a6-ba54ba1cc182","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51050","PortSpecifier":{"PortValue":51050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51050","PortSpecifier":{"PortValue":51050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626066,"nanos":689505832},"http":{"id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE\"}"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","subscription":"e2e-rate-iso-a-18400f","tenant":"e2e-shared-a-77ffac","userId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-18400f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-18400f"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","selected_subscription":"e2e-rate-iso-a-18400f","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-18400f@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01dcf0ad-6e43-4c18-8f76-e9940084c2ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40246","PortSpecifier":{"PortValue":40246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43471b19-3e71-4d5d-a380-ad544e42215e","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40246","PortSpecifier":{"PortValue":40246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626067,"nanos":750687406},"http":{"id":"43471b19-3e71-4d5d-a380-ad544e42215e","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE\"}"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","subscription":"e2e-rate-iso-a-18400f","tenant":"e2e-shared-a-77ffac","userId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-18400f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-18400f"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","selected_subscription":"e2e-rate-iso-a-18400f","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-18400f@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43471b19-3e71-4d5d-a380-ad544e42215e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40258","PortSpecifier":{"PortValue":40258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40258","PortSpecifier":{"PortValue":40258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626068,"nanos":801096963},"http":{"id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mXcbIRssXQdTHKyC_wMy7PWPcQpWRkESMrrKDhElf9TgKjmK8cdi6UX3RPgE\"}"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","subscription":"e2e-rate-iso-a-18400f","tenant":"e2e-shared-a-77ffac","userId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-18400f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-18400f"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66f8991d-6a16-42fb-8c8a-1e091cf2f661","keyName":"e2e-rate-a-18400f","selected_subscription":"e2e-rate-iso-a-18400f","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-18400f@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-18400f","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1800b48a-24ad-4176-8ba8-f9e39a63ce52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41958","PortSpecifier":{"PortValue":41958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aff63a4-0030-412e-bc92-941471be1d8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41958","PortSpecifier":{"PortValue":41958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626079,"nanos":681776253},"http":{"id":"1aff63a4-0030-412e-bc92-941471be1d8c","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aff63a4-0030-412e-bc92-941471be1d8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33998","PortSpecifier":{"PortValue":33998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33998","PortSpecifier":{"PortValue":33998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626079,"nanos":722288058},"http":{"id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"]}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09db2161d993"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68946f28-1721-45a4-8489-47168e13de34"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f74cf7c4-a703-4f55-a274-dca7ffb6b155","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2e0e356-6b33-4bcf-9398-4c54452417e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626079,"nanos":759014609},"http":{"id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0ed7b97-4dde-952c-864b-b017b1feb8a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41978","PortSpecifier":{"PortValue":41978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41978","PortSpecifier":{"PortValue":41978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626080,"nanos":792923089},"http":{"id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b3a2e3f-d4eb-4240-a42f-375df6e02853","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab526c04-ad11-4403-bda3-8de0791af00b","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626081,"nanos":831018826},"http":{"id":"ab526c04-ad11-4403-bda3-8de0791af00b","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab526c04-ad11-4403-bda3-8de0791af00b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41996","PortSpecifier":{"PortValue":41996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41996","PortSpecifier":{"PortValue":41996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626082,"nanos":890524284},"http":{"id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c1b9c0e-2c0a-4eea-901c-08f45e66a728","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42010","PortSpecifier":{"PortValue":42010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42010","PortSpecifier":{"PortValue":42010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626083,"nanos":928946690},"http":{"id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e96dddc3-3b98-4eb4-b05c-384fbc32e23f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8657a983-6395-4a17-a09b-a0d02c756794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42022","PortSpecifier":{"PortValue":42022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8657a983-6395-4a17-a09b-a0d02c756794","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8657a983-6395-4a17-a09b-a0d02c756794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42022","PortSpecifier":{"PortValue":42022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626084,"nanos":962721185},"http":{"id":"8657a983-6395-4a17-a09b-a0d02c756794","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8657a983-6395-4a17-a09b-a0d02c756794","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8657a983-6395-4a17-a09b-a0d02c756794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8657a983-6395-4a17-a09b-a0d02c756794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8657a983-6395-4a17-a09b-a0d02c756794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","method":"POST","path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions","host":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626086,"nanos":1465267},"http":{"id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","method":"POST","headers":{":authority":"e2e-shared-a-77ffac.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIuMQiCYGLWddJaX_AepJ3qsURvEdffXGGqPmymnv8V6JMfnKr4uXotwiNmW\"}"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","subscription":"e2e-rate-iso-a-ed1479","tenant":"e2e-shared-a-77ffac","userId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\",\"requestedSubscription\":\"e2e-rate-iso-a-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77ffac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e1b665-e1d5-4d54-b783-59d93707e8b3","keyName":"e2e-rate-a-ed1479","selected_subscription":"e2e-rate-iso-a-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-a-77ffac/e2e-rate-iso-a-ed1479@ai-tenant-e2e-shared-a-77ffac/rate-test-model-77ffac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77ffac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ed1479","namespace":"ai-tenant-e2e-shared-a-77ffac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cdd3808-3756-45b5-bf1a-834cdfc987a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34006","PortSpecifier":{"PortValue":34006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"762e0262-9bce-4b23-8b17-f4b4203f5280","method":"POST","path":"/ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58/v1/completions","host":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34006","PortSpecifier":{"PortValue":34006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783626086,"nanos":37223001},"http":{"id":"762e0262-9bce-4b23-8b17-f4b4203f5280","method":"POST","headers":{":authority":"e2e-shared-b-11fb58.apps.76277fa3-478a-4fda-bc0e-09db2161d993.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9dtJLFB0Ykgfbmh2_PeNvB07lnF3YAuMk1AvCtVojaKDAsm6gEXj8FoljD7F"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9dtJLFB0Ykgfbmh2_PeNvB07lnF3YAuMk1AvCtVojaKDAsm6gEXj8FoljD7F\"}"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be28f492-12cb-45c6-9ded-a536c2be4ef0","keyName":"e2e-rate-b-ed1479","subscription":"e2e-rate-iso-b-ed1479","tenant":"e2e-shared-b-11fb58","userId":"be28f492-12cb-45c6-9ded-a536c2be4ef0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58\",\"requestedSubscription\":\"e2e-rate-iso-b-ed1479\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11fb58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-11fb58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ed1479","namespace":"ai-tenant-e2e-shared-b-11fb58","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ed1479"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be28f492-12cb-45c6-9ded-a536c2be4ef0","keyName":"e2e-rate-b-ed1479","selected_subscription":"e2e-rate-iso-b-ed1479","selected_subscription_key":"ai-tenant-e2e-shared-b-11fb58/e2e-rate-iso-b-ed1479@ai-tenant-e2e-shared-b-11fb58/rate-test-model-11fb58","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-11fb58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ed1479","namespace":"ai-tenant-e2e-shared-b-11fb58","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:41:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"762e0262-9bce-4b23-8b17-f4b4203f5280","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2c622d923bb656e0c45b49f0fdbfeaa2924bf18b12b831201001351e914ba2"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7dbbcbac17e3f78afdb60b88f1b5adf389a21a22542de65aa2bb7c17341f470"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f79f6604aeb7a69280ddc6b740a757aa8ced6c984a9aff14928a213b220b51ec"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3143618e1d5abb8132b36ab7f440e3295ee5f979e8ca29324e84aef3b118d41c"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d301b3111cf71c89554e592e5265ba05f96be839fecb5d08d4f5be81bfee432"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/859f9a9c8948f581a70e2a3461fb99a27ddf2fccfdff420b092f3cbe98238074"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/768829d9827a1a2c284e82ffe0be1e0cdde6213b8341e0dd31e195cfe68164d0"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abfc962b8ce340726db42e809215754dfce112f78b03bcde845ac4eb5703fd4"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7689e4c47171498709feccfb6de342c8e383f19bb3d00e5e9bfc283488129c3"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9910fe8d36f13e9db413edfab9b8d2611c3e05cabb4a1fb846faaa4eea3d02dd"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/548bfe959a2141fac2e17bbafaf6ad3522c5c97e9817cc9011a65cc5083804f6"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/851975bd5e2fbde577adf7ce437c130c698ed07751bba844a470e5bfb0ce2dce"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e71e7b544c629a9d91cd7be97d48fd16613155fd37ed885ecfd27cbfa270774"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68f1016b2e73065158ef8c63d8265b39351980ca4bcb8e8dd20cd012d5b96d5c"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f76807113d6c07ac633d285d004af7eacc55881b2ee88b41232c4023ce817da"}
{"level":"info","ts":"2026-07-09T19:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89136e2a6ffe8e15f3bd665465c91f6154874fb4178bc037c267cfefa0fb7f30"}
{"level":"info","ts":"2026-07-09T19:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefdaa3c0c9ecd6dbfb877c7f1e993f6b29835529e3356ef000c93f1ee711286"}
{"level":"info","ts":"2026-07-09T19:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fefb636113467d6db7f2c3bc25d0e9c4a6ce664d1cf77815a5ce2a9519edd3d"}
{"level":"info","ts":"2026-07-09T19:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90ece9b6b9b15446b0e49677eeb3bd3173ebcbeb0235b7e0f57fed09b1ed6a5a"}
{"level":"info","ts":"2026-07-09T19:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25fcdba087be9f020b110517c48730ae0085452552eb43c520d12f9d66049fa"}
{"level":"info","ts":"2026-07-09T19:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18358c09c7e24f8edd8f4fd88c7b6ceca0059e49ce0d9cf5c11b3918861216f0"}
{"level":"info","ts":"2026-07-09T19:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81889be693c057fce698b25d1d26f847a332a5a5565262b8eb3819ddcb9d28f3"}
{"level":"info","ts":"2026-07-09T19:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec8eb6c47c9ea8ebe4eb3ce1f640315dc141c747048d50958b76402bd56f05e2"}
{"level":"info","ts":"2026-07-09T19:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a5784c7424e626b2d23595885dc95fc44676351d4b81cd81bde75b4264048b"}