--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"error","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"error","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48340","PortSpecifier":{"PortValue":48340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48340","PortSpecifier":{"PortValue":48340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344751,"nanos":842858143},"http":{"id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23ab703-a505-46ab-9fd4-6b2cb47119bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39886","PortSpecifier":{"PortValue":39886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39886","PortSpecifier":{"PortValue":39886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344751,"nanos":883376773},"http":{"id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb82d163-cab9-4bf4-8e48-7af0cc29e58c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bfbf654-a5ff-4546-b78c-a2004067bada","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344751,"nanos":922446666},"http":{"id":"5bfbf654-a5ff-4546-b78c-a2004067bada","method":"GET","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xoyVzXrSPO6yCt9r_7iJN0s9Y9wWr5vwMpZ0VgWQNr9kJgKWEzPgx63VuLSL"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xoyVzXrSPO6yCt9r_7iJN0s9Y9wWr5vwMpZ0VgWQNr9kJgKWEzPgx63VuLSL\"}"}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-18T03:19:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bfbf654-a5ff-4546-b78c-a2004067bada","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-18T03:19:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:19:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"error","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf56407-d7a0-4628-9180-4723144773e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47244","PortSpecifier":{"PortValue":47244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"baf56407-d7a0-4628-9180-4723144773e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf56407-d7a0-4628-9180-4723144773e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47244","PortSpecifier":{"PortValue":47244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344771,"nanos":259783087},"http":{"id":"baf56407-d7a0-4628-9180-4723144773e4","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"baf56407-d7a0-4628-9180-4723144773e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"baf56407-d7a0-4628-9180-4723144773e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf56407-d7a0-4628-9180-4723144773e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf56407-d7a0-4628-9180-4723144773e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf56407-d7a0-4628-9180-4723144773e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:46388","PortSpecifier":{"PortValue":46388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9260c9a-d968-491f-a170-7dd99ef108e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:46388","PortSpecifier":{"PortValue":46388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344771,"nanos":295533071},"http":{"id":"c9260c9a-d968-491f-a170-7dd99ef108e6","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9260c9a-d968-491f-a170-7dd99ef108e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47252","PortSpecifier":{"PortValue":47252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"282e781d-47f7-470d-9c4e-a6703afb1a90","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47252","PortSpecifier":{"PortValue":47252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344771,"nanos":341122939},"http":{"id":"282e781d-47f7-470d-9c4e-a6703afb1a90","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"282e781d-47f7-470d-9c4e-a6703afb1a90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:46396","PortSpecifier":{"PortValue":46396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07ceca46-0b23-4633-8b10-d548a12a3660","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:46396","PortSpecifier":{"PortValue":46396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344771,"nanos":374725266},"http":{"id":"07ceca46-0b23-4633-8b10-d548a12a3660","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ceca46-0b23-4633-8b10-d548a12a3660","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"error","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"error","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:19:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344792,"nanos":759688934},"http":{"id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fb6b904-f76d-4915-91d1-f3df3060c6d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:59718","PortSpecifier":{"PortValue":59718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:59718","PortSpecifier":{"PortValue":59718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344792,"nanos":801391341},"http":{"id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c359f2-707d-437e-9af8-8ea6d06dce77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:59722","PortSpecifier":{"PortValue":59722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"483879bb-69fe-4c25-bae9-1a716d1dd503","method":"GET","path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:59722","PortSpecifier":{"PortValue":59722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344792,"nanos":847232620},"http":{"id":"483879bb-69fe-4c25-bae9-1a716d1dd503","method":"GET","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"483879bb-69fe-4c25-bae9-1a716d1dd503","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48486","PortSpecifier":{"PortValue":48486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","method":"GET","path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:48486","PortSpecifier":{"PortValue":48486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344792,"nanos":882512515},"http":{"id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","method":"GET","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bf431bb-eda3-4eb9-abff-9bfc1b5cf364",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceda15c5-0557-4e27-94a2-a037fdfae7c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"error","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47606","PortSpecifier":{"PortValue":47606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47606","PortSpecifier":{"PortValue":47606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344812,"nanos":136654583},"http":{"id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce85bd5-23b7-491b-a80b-7635b81eecb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7a39a8f-ff3b-46dd-957f-90684432431f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344812,"nanos":174031600},"http":{"id":"b7a39a8f-ff3b-46dd-957f-90684432431f","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/auth-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a39a8f-ff3b-46dd-957f-90684432431f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47618","PortSpecifier":{"PortValue":47618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47618","PortSpecifier":{"PortValue":47618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344812,"nanos":220990368},"http":{"id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kmls4Wq7Mh1UjX80_eVZM8BaWLTAo2HYzkGbx8T9rtYCxveIqGIN4yma5EIe"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kmls4Wq7Mh1UjX80_eVZM8BaWLTAo2HYzkGbx8T9rtYCxveIqGIN4yma5EIe\"}"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"488e6383-9109-48ec-ab75-206d791ecc51","keyName":"e2e-auth-iso-a-4fc08a","subscription":"e2e-auth-iso-9c2328","tenant":"e2e-shared-a-e88910","userId":"488e6383-9109-48ec-ab75-206d791ecc51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/auth-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9c2328"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:20:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1300c5f-1f62-4c64-a184-66dd3183fa93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:20:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cea641dd9edd7a7f018c8cbdc6350c781cedbe481c3d78461f7e25717f302e7"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cedbf6d11c5cc8ce94a6de66901a231b66ecaa76e3217940b7ec530022ded2d"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00f59a8043a16751a30c9b0e3a84ab28747d6ca572d1b368d2991fcf9705931e"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdbac541ca5b863c5adf9d125c7b7b67886551572badb2315bd005840820c01a"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7934c19afedebc4ee777f1b36cc753fa11de2c25067660233f9861c4a19ff4"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3035be183954752bd89d8c18271f598cef9d7d3d9afa62dfe363643a9a605fcc"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36575b6b6c6743a2c594fac158551626c362c17b356c711c8e95857f5db77566"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ce899a0765dcd0d39bed65a37842b81134497f36771d50364623cdf1b077b42"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ac0134d5ae734b72abb32f527b71ba5a6cb5c420e39073e432ff8831ef6486"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d769e79e7714af089f5b3376f9b8ddffa5b6a8f81c6fdc6833c50e8327eaab9"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8592ede96b5a8f28c1a68d045a74cb1c818b4f25293e4847631eef1d959c368d"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66815e64d4fe6e1868849dbc26b67c3c0692dcfcd0e3c79efa7330c205bd2380"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acdcee581d02d14c6ed354dc40bc99b4d3d316faf5be14ae8835c80031982b5"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e88e1fe4a2ef066657ea5d8d1d72c670bbd48871e9d93f71352c9fc4d438e"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acf33cd9edb36d2920d6e92b7ab38773acb5be650514160c0b453fd7933bc56"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:20:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a762c02779197c62b400b42be16c7494ace8efa15915ace1e15ef86b4e89c47b"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8"}
{"level":"info","ts":"2026-07-18T03:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:21:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"error","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:21:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344876,"nanos":609805523},"http":{"id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/sub-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4db05b1e-ee99-4fdf-92b6-2512aa755871","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:52932","PortSpecifier":{"PortValue":52932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e58cf201-b180-496e-878f-fe0a52e3a45a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:52932","PortSpecifier":{"PortValue":52932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344876,"nanos":653861297},"http":{"id":"e58cf201-b180-496e-878f-fe0a52e3a45a","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/sub-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e58cf201-b180-496e-878f-fe0a52e3a45a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:56104","PortSpecifier":{"PortValue":56104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:56104","PortSpecifier":{"PortValue":56104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344876,"nanos":695712450},"http":{"id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","method":"GET","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ddoFugWUdpak6YiX_glO9KZUNX7OWvIVRpCj65JnUjhW8pDUrX4pYkIxetWT"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ddoFugWUdpak6YiX_glO9KZUNX7OWvIVRpCj65JnUjhW8pDUrX4pYkIxetWT\"}"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"57aa276c-6229-49ea-9f43-30620693898e","keyName":"e2e-sub-iso-01e4f7","subscription":"e2e-a-only-79e908","tenant":"e2e-shared-a-e88910","userId":"57aa276c-6229-49ea-9f43-30620693898e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/sub-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-79e908"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb0ca9f-0a32-4794-af1d-6d850a63d124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da7532d7-169f-4768-9e63-329b75ab0327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:52936","PortSpecifier":{"PortValue":52936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da7532d7-169f-4768-9e63-329b75ab0327","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da7532d7-169f-4768-9e63-329b75ab0327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:52936","PortSpecifier":{"PortValue":52936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344876,"nanos":742894600},"http":{"id":"da7532d7-169f-4768-9e63-329b75ab0327","method":"GET","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16UCrtkputoNae6lD_ueQijdlL6M1SwHpiwhZsMaTT449T56CXIm8vXM2V7nV"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16UCrtkputoNae6lD_ueQijdlL6M1SwHpiwhZsMaTT449T56CXIm8vXM2V7nV\"}"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d47b0855-a30c-4b92-ae11-c3ef0827d612","keyName":"e2e-sub-iso-e8b222","subscription":"e2e-b-only-79e908","tenant":"e2e-shared-b-b50cfd","userId":"d47b0855-a30c-4b92-ae11-c3ef0827d612","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da7532d7-169f-4768-9e63-329b75ab0327","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/sub-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-79e908"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da7532d7-169f-4768-9e63-329b75ab0327","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da7532d7-169f-4768-9e63-329b75ab0327","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da7532d7-169f-4768-9e63-329b75ab0327","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:42140","PortSpecifier":{"PortValue":42140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:42140","PortSpecifier":{"PortValue":42140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344886,"nanos":813035081},"http":{"id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/sub-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33c11ccd-2fef-49d4-9b66-0a5d54c8ea3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"480f15c6-6456-4323-83ae-871daabece50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:37528","PortSpecifier":{"PortValue":37528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"480f15c6-6456-4323-83ae-871daabece50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"480f15c6-6456-4323-83ae-871daabece50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:37528","PortSpecifier":{"PortValue":37528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344886,"nanos":858010308},"http":{"id":"480f15c6-6456-4323-83ae-871daabece50","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"480f15c6-6456-4323-83ae-871daabece50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"480f15c6-6456-4323-83ae-871daabece50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/sub-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"480f15c6-6456-4323-83ae-871daabece50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"480f15c6-6456-4323-83ae-871daabece50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"480f15c6-6456-4323-83ae-871daabece50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:42146","PortSpecifier":{"PortValue":42146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2f7058f-f667-4eb8-9d40-094c0473482e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:42146","PortSpecifier":{"PortValue":42146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344886,"nanos":895123090},"http":{"id":"d2f7058f-f667-4eb8-9d40-094c0473482e","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YTX8ChezdERfgwt1_j3u9iOLLFLVTvUuTgpFEyva0BMsG48GvOd1MGZL1lDT"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YTX8ChezdERfgwt1_j3u9iOLLFLVTvUuTgpFEyva0BMsG48GvOd1MGZL1lDT\"}"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab2fe183-07a8-4f4b-a40a-e99c81619c64","keyName":"e2e-sub-iso-7e9fad","subscription":"e2e-shared-sub-a459c7","tenant":"e2e-shared-a-e88910","userId":"ab2fe183-07a8-4f4b-a40a-e99c81619c64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/sub-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a459c7"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2f7058f-f667-4eb8-9d40-094c0473482e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:37544","PortSpecifier":{"PortValue":37544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:37544","PortSpecifier":{"PortValue":37544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344886,"nanos":944760812},"http":{"id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OGie7pCW3sBsXcaa_C67R8ZiTBo5IUWcA6MR089Ov1sqqYlhwY5baFmR4WQ"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OGie7pCW3sBsXcaa_C67R8ZiTBo5IUWcA6MR089Ov1sqqYlhwY5baFmR4WQ\"}"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3e1ec40-22f6-493b-9867-51897c0df3c4","keyName":"e2e-sub-iso-87b490","subscription":"e2e-shared-sub-a459c7","tenant":"e2e-shared-b-b50cfd","userId":"f3e1ec40-22f6-493b-9867-51897c0df3c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/sub-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a459c7"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:21:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14b8c9e-7e16-4719-b964-eb9b0c3f49c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2dabda13614ae8aa98dc99674a774770781daafbbaef3651aab750a9ff1bc85"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/724c5588b9bea970bf6f9d0e7c21294e5c8de34ab454a6657486ec4c238c635f"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e228a8ec64b10df3a97460146da44e406f863e0dd28942bf02762c4e9767e76"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50bfa54a0857d81e9a0871a46201cf6ac0cac0b16d5dfdafcad648db540e840e"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2471c06513a45c9f8e2dc6f04dd3dae27a19c812b91f9a574f5bb59d56fa5bd8"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ccbe99af53878761cb35c4b82aa3a1139d70f6e8b30ba31dd47de8644b6d94f"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51b2d89a8393bc9a5afa1dc3c5bdb70aee9cc333eb322eea46282a444babc2df"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac460328a2e91e1a6c7a16355af795f6f60f6c25dd78a005b0a897e067d0cb21"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89807945e5c5cdabea98b2ce490695217b6f4cdfc68981e59e27b3212e01841a"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d77fab60405765013118d87dc76c11be5ab4d92f24353a0f139aeae175ef0c30"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c2ba525ded6a77eea56ac92f08d1c168fb7301809f366b26def07d4afac3f3c"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95e4334bcd4c1c0f60809541c62fdc4449fad1a6265f28b0a882e7d592a9e417"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50d432544a3d6fbbee654b7da85f70aff3448f8202918f5cf31346d0bc121e78"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbf876a8a634b46927575cb89a406a14bd76066c0062b8b23c6ee105fad5367a"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5d1cdd5ea5889bc5b5ad4cb06500f503a1a63ff71dad6bec7fc624b0a5f9032"}
{"level":"info","ts":"2026-07-18T03:21:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13e36b7ea9946c0f1300d493f4f8db7e319437dbc6fe6364298080b387508c7c"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"}
{"level":"error","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"error","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"error","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47800","PortSpecifier":{"PortValue":47800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47800","PortSpecifier":{"PortValue":47800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":429564899},"http":{"id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47163852-ea1f-4692-b7c6-ee784691e5eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":470263850},"http":{"id":"47163852-ea1f-4692-b7c6-ee784691e5eb","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47804","PortSpecifier":{"PortValue":47804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"022d528e-9993-43d7-a6eb-68a038179cf2","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47804","PortSpecifier":{"PortValue":47804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":509763424},"http":{"id":"022d528e-9993-43d7-a6eb-68a038179cf2","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47814","PortSpecifier":{"PortValue":47814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47814","PortSpecifier":{"PortValue":47814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344955,"nanos":572687558},"http":{"id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32814","PortSpecifier":{"PortValue":32814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32814","PortSpecifier":{"PortValue":32814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344956,"nanos":614817641},"http":{"id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79c9d972-4236-46c1-820d-129f22f046d4","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344957,"nanos":655666021},"http":{"id":"79c9d972-4236-46c1-820d-129f22f046d4","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79c9d972-4236-46c1-820d-129f22f046d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c9d972-4236-46c1-820d-129f22f046d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c9d972-4236-46c1-820d-129f22f046d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344958,"nanos":695127378},"http":{"id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32832","PortSpecifier":{"PortValue":32832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32832","PortSpecifier":{"PortValue":32832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344959,"nanos":733101696},"http":{"id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32846","PortSpecifier":{"PortValue":32846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32846","PortSpecifier":{"PortValue":32846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344960,"nanos":770445005},"http":{"id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32850","PortSpecifier":{"PortValue":32850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32850","PortSpecifier":{"PortValue":32850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344961,"nanos":814523815},"http":{"id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55042","PortSpecifier":{"PortValue":55042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55042","PortSpecifier":{"PortValue":55042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":459200668},"http":{"id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1586516e-0759-4eed-966c-7307d866c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1586516e-0759-4eed-966c-7307d866c4e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1586516e-0759-4eed-966c-7307d866c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":499089190},"http":{"id":"1586516e-0759-4eed-966c-7307d866c4e2","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1586516e-0759-4eed-966c-7307d866c4e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1586516e-0759-4eed-966c-7307d866c4e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72df85c4-17ec-4072-87f2-48239517d504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55048","PortSpecifier":{"PortValue":55048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72df85c4-17ec-4072-87f2-48239517d504","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72df85c4-17ec-4072-87f2-48239517d504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55048","PortSpecifier":{"PortValue":55048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":538247336},"http":{"id":"72df85c4-17ec-4072-87f2-48239517d504","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72df85c4-17ec-4072-87f2-48239517d504","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72df85c4-17ec-4072-87f2-48239517d504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72df85c4-17ec-4072-87f2-48239517d504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55054","PortSpecifier":{"PortValue":55054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55054","PortSpecifier":{"PortValue":55054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344971,"nanos":575392436},"http":{"id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344972,"nanos":617353476},"http":{"id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","method":"POST","path":"/ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd/v1/completions","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344972,"nanos":657016299},"http":{"id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UVvyz1G8xhvA4tML_YvoaMNTlsayT8X4ecc3DmGh6dKYybMSJj8uNiOhT3Gv"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UVvyz1G8xhvA4tML_YvoaMNTlsayT8X4ecc3DmGh6dKYybMSJj8uNiOhT3Gv\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41050b4c-faad-4270-bc13-34ae4288ee3b","keyName":"e2e-rate-b-19cf6a","subscription":"e2e-rate-iso-b-19cf6a","tenant":"e2e-shared-b-b50cfd","userId":"41050b4c-faad-4270-bc13-34ae4288ee3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\",\"requestedSubscription\":\"e2e-rate-iso-b-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b50cfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19cf6a","namespace":"ai-tenant-e2e-shared-b-b50cfd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"41050b4c-faad-4270-bc13-34ae4288ee3b","keyName":"e2e-rate-b-19cf6a","selected_subscription":"e2e-rate-iso-b-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-b-b50cfd/e2e-rate-iso-b-19cf6a@ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b50cfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19cf6a","namespace":"ai-tenant-e2e-shared-b-b50cfd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}